CVE-2016-1008: Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and…

PriorityP337high8.4CVSS 3.0

AVLACLPRNUINSUCHIHAH

EPSS

1.10%

62.2th percentile

Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	<= 11.0.14	—
adobe	acrobat_dc	<= 15.006.30119	—
adobe	acrobat_dc	<= 15.010.20059	—
adobe	acrobat_reader	<= 11.0.14	—
adobe	acrobat_reader_dc	<= 15.010.20059	—
adobe	acrobat_reader_dc	—	—

CVSS provenance

nvdv3.08.4HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.