The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-102
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096