HackerFeeds
All CVEs

CVE-2013-2729

CRITICAL9.8
CISA KEV

Published 2013-05-16 · Updated 2026-06-16 · Source psirt@adobe.com

Summary

CVE-2013-2729 is a critical-severity (CVSS 9.8) vulnerability in Adobe Reader and Acrobat. CISA added it to the Known Exploited Vulnerabilities catalog on March 28, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 18, 2022. CISA does not currently list it as used in ransomware campaigns. Adobe has 83 vulnerabilities in the KEV catalog, 11 of them linked to ransomware.

All 83 known-exploited Adobe vulnerabilities →

Description

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190CWE-190

CISA Known-Exploited Vulnerability

Product: Adobe — Reader and Acrobat

Name: Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Date added: 2022-03-28 · Due: 2022-04-18

Required action: Apply updates per vendor instructions.

References

View on NVD