ZeroHour

CVE-2016-0943

CVSS 3.0
8.8 high
EPSS
7%p94
Published
()
Modified
Description

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Vendors
adobe
Products
acrobat dc, acrobat reader dc, acrobat reader, acrobat
Weakness
CWE-264
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.