CVE-2016-6958

—

CVSS 3.0

9.8 critical

EPSS

3%p88

Published

Oct 13, 2016 (Oct 13, 2016)

Modified

Jun 17, 2026

Description

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to bypass intended access restrictions via unspecified vectors.

Vendors: adobe
Products: acrobat, acrobat dc, acrobat reader dc, reader
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.4%)

In the news1 stories

Palo Alto Networks Discovers Two Adobe Reader Privileged JavaScript Zero

Palo Alto Unit 42Jul 3, 01:11 UTC · Jul 3, 2020Exploit / PoC CVE-2016-6957 CVE-2016-6958