CVE-2016-0943

Published: Jan 14, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Affected (32)

Products: Adobe: Acrobat Dc, Acrobat Reader Dc, Acrobat Reader, Acrobat

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Dc	Up to 15.006.30097
Adobe Acrobat Dc	Up to 15.009.20077
Adobe Acrobat Reader Dc	Up to 15.006.30097
Adobe Acrobat Reader Dc	Up to 15.009.20077

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Reader	Up to 11.0.13
Adobe Acrobat Reader	Version 11.0.0
Adobe Acrobat Reader	Version 11.0.10
Adobe Acrobat Reader	Version 11.0.11
Adobe Acrobat Reader	Version 11.0.12
Adobe Acrobat Reader	Version 11.0.1
Adobe Acrobat Reader	Version 11.0.2
Adobe Acrobat Reader	Version 11.0.3
Adobe Acrobat Reader	Version 11.0.4
Adobe Acrobat Reader	Version 11.0.5
Adobe Acrobat Reader	Version 11.0.6
Adobe Acrobat Reader	Version 11.0.7
Adobe Acrobat Reader	Version 11.0.8
Adobe Acrobat Reader	Version 11.0.9

Configuration C

14 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 11.0.13
Adobe Acrobat	Version 11.0.0
Adobe Acrobat	Version 11.0.10
Adobe Acrobat	Version 11.0.11
Adobe Acrobat	Version 11.0.12
Adobe Acrobat	Version 11.0.1
Adobe Acrobat	Version 11.0.2
Adobe Acrobat	Version 11.0.3
Adobe Acrobat	Version 11.0.4
Adobe Acrobat	Version 11.0.5
Adobe Acrobat	Version 11.0.6
Adobe Acrobat	Version 11.0.7
Adobe Acrobat	Version 11.0.8
Adobe Acrobat	Version 11.0.9