CVE-2016-1079

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to obtain sensitive information from process memory via unspecified vectors, a different vulnerability than CVE-2016-1092.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: May 11, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-107907.5cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).CVE-2016-107915.3cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559).CVE-2016-107928.8cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).CVE-2016-107938.8cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).CVE-2016-107946.5cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).CVE-2016-107956.1cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).CVE-2016-107963.3cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).CVE-2016-107974.3cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).CVE-2016-107986.8cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).CVE-2016-107995.5cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).CVE-2016-10809.8Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Contin CVE-2016-108007.8cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).