CVE-2023-47063

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Cross site scripting

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47063 Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47075 ZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Illustrator 安全漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a read beyond the end of an allocated memory structure...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to potentially cause arbitrary code to be executed in the current user's context...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Illustrator 2023 and 2024. A malicious person could exploit the vulnerabilities to execute arbitrary execute code with the victim's privileges. The malicious person does not need prior authorizations to do so. Adobe has released updates to fix the vulnerabilitie...

Microsoft and Adobe Patch Tuesday, December 2023 Security Update Review

Microsoft has wrapped up the year with fewer security updates released in its Patch Tuesday, December 2023 edition. We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for December 2023 In this months Patch Tuesday edition,...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply th...

Adobe Illustrator < 27.9.1 / 28.0 < 28.1 Multiple Arbitrary code execution (APSB23-68) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 27.9.1, 28.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-68 advisory. - Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free...

Adobe Illustrator < 27.9.1 / 28.0 < 28.1 Multiple Arbitrary code execution (APSB23-68)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.1, 28.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-68 advisory. - Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

Adobe Illustrator < 27.3.1 Multiple Vulnerabilities (APSB23-19) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 27.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-19 advisory. - Illustrator version 26.5.2 and earlier and 27.2.0 and earlier are affected by a Use After Free vulnerability th...

CVE-2022-30646

Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-30644

Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...