Critical severity9.8NVD Advisory· Published Oct 13, 2016· Updated Jun 17, 2026

CVE-2016-6994

Description

Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6939.

Affected products

Adobe Inc./Acrobat Reader Dcllm-fuzzy
Range: <15.006.30243
Adobe Inc./Readerllm-fuzzy
Range: <11.0.18
Adobe Inc./Acrobat and Acrobat Reader DC Continuousllm-fuzzy
Range: <15.020.20039
Adobe Inc./Acrobatllm-fuzzy
Range: <11.0.18

Patches

Vulnerability mechanics

References

helpx.adobe.com/security/products/acrobat/apsb16-33.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/93487nvd
www.securitytracker.com/id/1036986nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000