CVE-2023-25859

Adobe Illustrator CVE-2023-25859 is an Improper Input Validation vulnerability affecting Illustrator 26.5.2 and 27.2.0 (and earlier) that could allow arbitrary code execution in the context of the current user when a user opens a malicious file. This relies on user interaction and is part of a se...

CVE-2023-25860

CVE-2023-25860 affects Adobe Illustrator 26.5.2 and earlier, and 27.2.0 and earlier. The vulnerability is an out-of-bounds write that could lead to arbitrary code execution in the context of the current user and requires the victim to open a crafted file (user interaction). Affected versions are ...

CVE-2023-26426 Adobe Illustrator (Beta) has a UAF vulnerability when parsing SVG files Arbitrary code execution

Illustrator version 26.5.2 and earlier and 27.2.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25860 Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Illustrator version 26.5.2 and earlier and 27.2.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26426

Summary (CVE-2023-26426) : Adobe Illustrator versions 26.5.2 and earlier, and 27.2.0 and earlier, are affected by a Use-After-Free (UAF) vulnerability that can cause arbitrary code execution in the context of the current user. Exploitation requires user interaction (a victim must open a malicious...

CVE-2023-25861

Adobe Illustrator 26.5.2 and earlier, and 27.2.0 and earlier, are affected by an out-of-bounds write vulnerability (CVE-2023-25861) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the attacker must trick the victim into opening...

CVE-2023-25862

Adobe Illustrator is affected by an out-of-bounds read in font parsing that can disclose memory contents and bypass ASLR. Affected: Illustrator 26.5.2 and earlier and 27.2.0 and earlier. Impact requires user interaction (victim must open a malicious file); CVE-2023-25862. Remediation: update to I...

CVE-2023-25859 Adobe Illustrator Improper Input Validation Remote Code Execution Vulnerability

Illustrator version 26.5.2 and earlier and 27.2.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2023-50822)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause arbitrary code execution...

Adobe Illustrator Memory Misreference Vulnerability (CNVD-2023-50818)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause arbitrary code execution...

Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2023-50820)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause arbitrary code execution...

Adobe Illustrator Out-of-Bounds Read Vulnerability (CNVD-2023-50819)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to obtain sensitive information...

Adobe Illustrator Code Execution Vulnerability (CNVD-2023-50821)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A code execution vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause arbitrary code execution...

Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Illustrator Font Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Illustrator 2023. A malicious party could exploit the vulnerabilities to gain access to sensitive data, or to execute arbitrary code with privileges of the victim. To do so, the malicious party must trick the victim into opening a malicious file to open. Adobe h...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause arbitrary code execution...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause arbitrary code execution...