CVE-2021-36010 Adobe Illustrator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must ope...

CVE-2021-36010 Adobe Illustrator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must ope...

CVE-2021-36010

Adobe Illustrator 2021 (version 25.2.3 and earlier) is affected by an out-of-bounds read vulnerability in SVG file parsing that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). The issue is documented across multiple sources (including CVE-20...

CVE-2021-36011 Adobe Illustrator improper neutralization of special elements used in an OS command

Adobe Illustrator version 25.2.3 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-36011 Adobe Illustrator improper neutralization of special elements used in an OS command

Adobe Illustrator version 25.2.3 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-36011

Adobe Illustrator 25.2.3 (and earlier) is affected by CVE-2021-36011, a command injection vulnerability that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The issue requires user interaction and affects both macOS and Windows install...

CVE-2021-36009 Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-36008

CVE-2021-36008: Adobe Illustrator 25.2.3 and earlier is affected by a Use-after-free in PDF/file parsing that allows an unauthenticated, context-user information disclosure when a crafted file is opened. Exploitation requires user interaction (open a malicious file). The issue is documented acros...

CVE-2021-36008 Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

CVE-2021-36009 Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-36008 Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

CVE-2021-36009

CVE-2021-36009 affects Adobe Illustrator 25.2.3 and earlier. A memory corruption vulnerability occurs when parsing specially crafted files, allowing an unauthenticated attacker to achieve arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a ma...

CVE-2021-28591 Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28591 Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28591

Adobe Illustrator 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability in PDF/file parsing that can lead to arbitrary code execution under the current user when a crafted file is opened. Exploitation requires user interaction. The issue is addressed in Illustrator 25.3.0 (APSB21...

CVE-2021-28592 Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28592 Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28592

Adobe Illustrator 25.2.3 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file (CVE-2021-28592). An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploitation requiring user interaction (vi...

CVE-2021-28593

CVE-2021-28593 affects Adobe Illustrator 25.2.3 and earlier, with a Use-After-Free flaw triggered while parsing a specially crafted file. An unauthenticated attacker could disclose sensitive information in the context of the current user, and exploitation requires user interaction (victim opens a...

CVE-2021-28593 Adobe Illustrator PostScript Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by a Use After Free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information in the context of the current user. Exploitation of this issu...