Live › vulnerability › CVE-2013-0640
Go to dashboardAdobe Reader and Acrobat have a memory corruption flaw in acroform.dll that lets a crafted PDF run code on the machine that opens it. Attackers are exploiting it in the wild, per CISA's Known Exploited Vulnerabilities list.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe Reader and Acrobat | vendor | – | – |
Open Adobe Reader or Acrobat and check Help > About for the version; compare it with the vendor's fixed release.
Update Adobe Reader or Acrobat to a version the vendor lists as fixed for CVE-2013-0640.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.
This page as .md · .json · in your agent: get_signal("CVE-2013-0640")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.