IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
8.8High KEV

CVE-2013-3346Adobe Reader and Acrobat Memory Corruption Vulnerability

adobe acrobat; adobe acrobat reader Published: (13 years ago)

Known exploited — Adobe Reader and Acrobat Memory Corruption Vulnerability

CISA confirmed this vulnerability is used in real attacks on 03.03.2022. Remediation deadline for US federal agencies: 24.03.2022.

Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2013-3346

Description

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Weakness (CWE): CWE-787

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
adobe acrobat 9.0 – < 9.5.5
adobe acrobat reader 9.0 – < 9.5.5

References and patches

CPE matches (NVD) (6)
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 9.0 < 9.5.5
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 10.0 < 10.1.7
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 11.0 < 11.0.03
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 9.0 < 9.5.5
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 10.0 < 10.1.7
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 11.0 < 11.0.03

Recent CVEs in the same product — Adobe Acrobat / Reader

8.8High
CVE-2026-100134

Acrobat for Edge | Out-of-bounds Write (CWE-787)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

4.3Medium
CVE-2026-100132

Acrobat for Edge | Out-of-bounds Read (CWE-125)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in tha…

5.5Medium
CVE-2026-81984

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a vic…

7.8High
CVE-2026-81989

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5Medium
CVE-2026-81991

Acrobat Reader | Out-of-bounds Read (CWE-125)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that …

7.8High
CVE-2026-81980

Acrobat Reader | Out-of-bounds Write (CWE-787)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.