Design/Logic Flaw

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

Design/Logic Flaw

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47063 Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47063

CVE-2023-47063 concerns Adobe Illustrator 28.0 and earlier, and 27.9 and earlier, with an out-of-bounds write that could allow arbitrary code execution in the caller’s context. Exploitation requires the user to open a malicious file (user interaction). Fixed: updates to Illustrator 27.9.1 and 28....

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47074

Adobe Illustrator is affected by an out-of-bounds read vulnerability in the JP2/file parsing path affecting Illustrator 28.0 and earlier and 27.9 and earlier. The issue can lead to code execution in the context of the targeted user when a crafted file is opened, with user interaction required. Mi...

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47075

Adobe Illustrator is affected by a Use-After-Free vulnerability in the JP2 parsing path that could allow arbitrary code execution when a victim opens a crafted file. Root cause: use-after-free in the JP2 parser. Impact: code execution in the context of the current user; exploitation requires user...

CVE-2023-47075 ZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

Adobe Illustrator 安全漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a read beyond the end of an allocated memory structure...

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Illustrator 2023 and 2024. A malicious person could exploit the vulnerabilities to execute arbitrary execute code with the victim's privileges. The malicious person does not need prior authorizations to do so. Adobe has released updates to fix the vulnerabilitie...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to potentially cause arbitrary code to be executed in the current user's context...

CVE-2023-47063: Out-of-bounds Write

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47075: Use After Free

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47074: Out-of-bounds Read

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

Microsoft and Adobe Patch Tuesday, December 2023 Security Update Review

Microsoft has wrapped up the year with fewer security updates released in its Patch Tuesday, December 2023 edition. We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for December 2023 In this months Patch Tuesday edition,...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply th...

Adobe Illustrator < 27.9.1 / 28.0 < 28.1 Multiple Arbitrary code execution (APSB23-68) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 27.9.1, 28.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-68 advisory. - Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free...

PT-2023-7692

Name of the Vulnerable Software and Affected Versions Adobe Illustrator versions 28.0 and earlier Adobe Illustrator versions 27.9 and earlier Description The issue is related to an out-of-bounds write vulnerability in the memory, which could allow an attacker to execute arbitrary code by opening ...