CVE-2016-1040
published 2016-05-11CVE-2016-1040: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
PriorityP345critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
5.71%
92.2th percentile
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | <= 11.0.15 | — |
| adobe | acrobat_dc | <= 15.006.30121 | — |
| adobe | acrobat_dc | <= 15.010.20060 | — |
| adobe | acrobat_reader_dc | <= 15.006.30121 | — |
| adobe | acrobat_reader_dc | <= 15.010.20060 | — |
| adobe | reader | <= 11.0.15 | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-57p7-h2w6-75hh: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1117 [CRITICAL] CWE-284 GHSA-57p7-h2w6-75hh: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, and CVE-2016-1062.
GHSA
GHSA-93h6-4j6c-668w: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1041 [CRITICAL] CWE-284 GHSA-93h6-4j6c-668w: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.
GHSA
GHSA-87jj-mjcp-pfjm: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1040 [CRITICAL] CWE-284 GHSA-87jj-mjcp-pfjm: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.
GHSA
GHSA-p3qp-f836-g8vg: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1062 [CRITICAL] CWE-284 GHSA-p3qp-f836-g8vg: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, and CVE-2016-1117.
GHSA
GHSA-c8pf-hvm2-frrw: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1039 [CRITICAL] CWE-284 GHSA-c8pf-hvm2-frrw: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.
GHSA
GHSA-qqmp-9rjj-fm2w: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1042 [CRITICAL] CWE-284 GHSA-qqmp-9rjj-fm2w: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.
GHSA
GHSA-m3v5-7xcg-7gj6: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 9.8
CVE-2016-1038 [CRITICAL] CWE-284 GHSA-m3v5-7xcg-7gj6: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.
GHSA
GHSA-rv7g-h7p7-cm57: Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2016-1044 [CRITICAL] CWE-284 GHSA-rv7g-h7p7-cm57: Adobe Reader and Acrobat before 11
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1062, and CVE-2016-1117.
No detection rules found.
No public exploits indexed.
2016-05-11
Published