CVE-2013-3346

Adobe Reader and Acrobat suffered a memory corruption vulnerability allowing arbitrary code execution, which was actively exploited in the wild.

A memory corruption flaw in Adobe Reader and Acrobat allowed attackers to execute arbitrary code or cause denial of service. This failure is critical for DIB organizations because it represents a repeated, high-risk vulnerability in a widely deployed product, often requiring constant vigilance and remediation. Organizations must ensure their Adobe products are patched to the latest versions to prevent exploitation.

Shame score — Adobe has a high-risk track record with repeated critical RCE vulnerabilities in Acrobat and Reader products, indicating a pattern of avoidable security failures in widely deployed software.