CVE-2016-7009: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acr...

Security readout for executives and security teams

This is an older Adobe Reader and Acrobat memory corruption flaw on Windows and OS X. If triggered through Adobe's unspecified vectors, it could crash the application or execute attacker-controlled code. Business risk is mainly from legacy endpoints still using pre-October 2016 Acrobat or Reader builds to open untrusted PDFs. Exposure is likely limited to organizations retaining old Adobe Reader or Acrobat installations on Windows or OS X. Modern, patched Acrobat deployments should not be affected according to the version thresholds in the CVE description. Prioritize remediation where legacy Acrobat or Reader remains in production, especially for users handling email attachments, external documents, or customer-uploaded PDFs. This is not currently evidenced as actively exploited in the provided sources, but the potential impact is code execution. Mitigation focus: Upgrade Adobe Reader and Acrobat beyond the fixed versions named by Adobe.; Remove unsupported legacy Reader or Acrobat installations from managed endpoints.; Restrict opening untrusted PDFs on systems that cannot be updated promptly..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.