Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-080
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068
http://www.zerodayinitiative.com/advisories/ZDI-16-369