CVE-2016-0947
Estado: ModificadaAlta (7.8)—
Vulnerabilidad de búsqueda de ruta no confiable en Adobe Download Manager, como se utiliza en Adobe Reader y Acrobat en versiones anteriores a 11.0.14, Acrobat y Acrobat Reader DC Classic en versiones anteriores a 15.006.30119 y Acrobat y Acrobat Reader DC Continuous en versiones anteriores a 15.010.20056 en Windows y OS X, permite a usuarios locales obtener privilegios a través de un recurso manipulado en un directorio no especificado.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.73%
- Percentil entre todas las CVEs puntuadas: 53
- Fecha de la puntuación: 10/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-0947",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-01-14T05:59:15.800",
"references": [
{
"url": "http://www.securitytracker.com/id/1034646",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@adobe.com"
},
{
"url": "https://helpx.adobe.com/security/products/acrobat/apsb16-02.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.securitytracker.com/id/1034646",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://helpx.adobe.com/security/products/acrobat/apsb16-02.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows local users to gain privileges via a crafted resource in an unspecified directory."
},
{
"lang": "es",
"value": "Vulnerabilidad de búsqueda de ruta no confiable en Adobe Download Manager, como se utiliza en Adobe Reader y Acrobat en versiones anteriores a 11.0.14, Acrobat y Acrobat Reader DC Classic en versiones anteriores a 15.006.30119 y Acrobat y Acrobat Reader DC Continuous en versiones anteriores a 15.010.20056 en Windows y OS X, permite a usuarios locales obtener privilegios a través de un recurso manipulado en un directorio no especificado."
}
],
"lastModified": "2026-06-17T00:38:31.420",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDDDFD6D-1CEF-42E6-9FB4-BFA3DE675CA3",
"versionEndIncluding": "11.0.13"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2643209D-1A36-4E2F-836A-0521F6932A99"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51C67ABD-5800-46DD-9E81-2A586698BC90"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9FF4675-A9FF-4B0F-BBC6-D29B6324D27D"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76CE9DE1-FFB6-483B-A76C-38819C1407B9"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA71918B-F2B2-442B-AA12-3E16759B0674"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15ACC0AD-EFB5-4C96-888A-3E8A1C35E64B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BBFA7D7-1A9E-4751-A14A-62C2DB2672A9"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "106D9571-59BF-4056-B7CD-F70FC3F1B73B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FD7CF1E-CF36-4291-B17F-67A070CBE2EE"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71DB447D-5C36-458E-BD07-4FC3CB26FDCE"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80D16772-02BF-4046-9C47-A25D07DB7F70"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAF0D04A-B95D-4B50-ACE8-DA3AA6ED7C54"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:11.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "812B6806-B488-4D8C-B942-9F3174ECD85D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C58D9C69-59AC-4C31-8813-DF07C322568E",
"versionEndIncluding": "15.006.30097"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "000C0EBD-E41C-471E-B71A-5CD418594EF5",
"versionEndIncluding": "15.009.20077"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91134715-4C87-4F5A-9B5A-11A6B66ED00A",
"versionEndIncluding": "15.006.30097"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B9A613-9E00-4D4E-8780-471E913CA60D",
"versionEndIncluding": "15.009.20077"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAB3A419-D57B-4E1E-83D3-34A2B73448A6",
"versionEndIncluding": "11.0.13"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "829ED66F-149C-4EC5-B9F1-5DD678AF40DC"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E72C3C61-511E-4977-B029-70277C68E24D"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47478166-EE66-4837-A6C0-0A519F9EDD26"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4E8E909-3277-429B-9CB2-973A606BB4A8"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1F0F0C4-0008-452E-99F5-6264465C3FFC"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E554FA7F-4F54-4BDD-80EB-0566805D995B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A48CD244-BCF6-4D0F-B07D-44304493BCFD"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86A84BB0-85D3-47E8-BC90-291E8C2CCEEC"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37283AD4-4B3F-48AB-A3DD-C33871CCB5DA"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85C3571E-43F0-41D3-840F-A811B88FFFC1"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1D97472-841C-471C-8668-AF96A41A1B7F"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83BEA317-8DD4-4C4D-ADD1-17EA314F31DD"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78D35D0E-E63A-4495-8318-45177838A40C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/426.html\">CWE-426: Untrusted Search Path</a>",
"sourceIdentifier": "psirt@adobe.com"
}