Back

CVE-2016-0940

CRITICAL

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0937, and CVE-2016-0941.

Published: Jan 14, 2016 Modified: May 6, 2026

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (32)

Vendor Product Version
adobe acrobat *
adobe acrobat 11.0.0
adobe acrobat 11.0.1
adobe acrobat 11.0.2
adobe acrobat 11.0.3
adobe acrobat 11.0.4
adobe acrobat 11.0.5
adobe acrobat 11.0.6
adobe acrobat 11.0.7
adobe acrobat 11.0.8
adobe acrobat 11.0.9
adobe acrobat 11.0.10
adobe acrobat 11.0.11
adobe acrobat 11.0.12
adobe acrobat_dc *
adobe acrobat_dc *
adobe acrobat_reader_dc *
adobe acrobat_reader_dc *
adobe acrobat_reader *
adobe acrobat_reader 11.0.0

…and 12 more

GitHub Security Advisory GHSA-fg4m-3vxx-22qr

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat...

References (4)

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 3.94%

Top 11% most likely to be exploited

Threat Score 40.4 / 100

Data Sources

NVD EPSS GitHub