CVE-2013-0641

Adobe Reader's unpatched buffer overflow vulnerability allowed remote code execution and was actively exploited in the wild.

An unpatched buffer overflow in Adobe Reader enabled remote code execution, a flaw that remained unpatched long enough to be added to CISA's KEV catalog. DIB organizations must enforce strict patch management for Adobe products and monitor KEV entries to prevent similar exploits. Failure to patch such vulnerabilities exposes systems to arbitrary code execution and potential data compromise.

Shame score — The vulnerability was unpatched for years, was actively exploited in the wild, and was linked to ransomware campaigns, demonstrating severe negligence in patch management.