CVE-2013-3346VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability

Affects Adobe Reader and AcrobatSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/24/2022
EPSS: 78.9% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2013-3346 (opens in a new tab)

Description

Adobe Reader and Acrobat contain a memory corruption vulnerability (CVE-2013-3346) that can allow attackers to execute arbitrary code or cause a denial of service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

CVE-2013-3346 is a memory corruption vulnerability in Adobe Reader and Acrobat. Successful exploitation can lead to arbitrary code execution or denial of service conditions. The vulnerability is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). Exploits have been observed in the wild, indicating active threat use. No vendor patch or remediation details are included in the provided information.

Impact

Exploitation of this vulnerability can result in arbitrary code execution, potentially allowing attackers to take control of affected systems, or cause denial of service, disrupting normal application functionality. The presence of known exploits in the wild increases the risk to users of vulnerable versions.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should consult Adobe's official security advisories to determine if patches or mitigations are available for this vulnerability.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:25:54 UTC

Weaknesses

References

Related threats