Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2016-1087

Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1090 and CVE-2016-4106.

  • Published: May 11, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-1087
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
adobe / acrobat - 11.0.15.x
adobe / acrobat_dc - 15.006.30121.x
adobe / acrobat_dc - 15.010.20060.x
adobe / acrobat_reader_dc - 15.006.30121.x
adobe / acrobat_reader_dc - 15.010.20060.x
adobe / reader - 11.0.15.x