CVE-2021-36011

Adobe Illustrator 25.2.3 (and earlier) is affected by CVE-2021-36011, a command injection vulnerability that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The issue requires user interaction and affects both macOS and Windows install...

CVE-2021-36009 Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-36008

CVE-2021-36008: Adobe Illustrator 25.2.3 and earlier is affected by a Use-after-free in PDF/file parsing that allows an unauthenticated, context-user information disclosure when a crafted file is opened. Exploitation requires user interaction (open a malicious file). The issue is documented acros...

CVE-2021-36009 Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-36008 Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

CVE-2021-36008 Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

CVE-2021-36009

CVE-2021-36009 affects Adobe Illustrator 25.2.3 and earlier. A memory corruption vulnerability occurs when parsing specially crafted files, allowing an unauthenticated attacker to achieve arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a ma...

CVE-2021-28591 Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28591 Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28591

Adobe Illustrator 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability in PDF/file parsing that can lead to arbitrary code execution under the current user when a crafted file is opened. Exploitation requires user interaction. The issue is addressed in Illustrator 25.3.0 (APSB21...

CVE-2021-28592 Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28592 Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28592

Adobe Illustrator 25.2.3 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file (CVE-2021-28592). An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploitation requiring user interaction (vi...

CVE-2021-28593

CVE-2021-28593 affects Adobe Illustrator 25.2.3 and earlier, with a Use-After-Free flaw triggered while parsing a specially crafted file. An unauthenticated attacker could disclose sensitive information in the context of the current user, and exploitation requires user interaction (victim opens a...

CVE-2021-28593 Adobe Illustrator PostScript Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by a Use After Free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information in the context of the current user. Exploitation of this issu...

CVE-2021-28593 Adobe Illustrator PostScript Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Illustrator version 25.2.3 and earlier is affected by a Use After Free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information in the context of the current user. Exploitation of this issu...

PT-2021-21099 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 25.2.3 and earlier Description: The issue is related to a memory corruption vulnerability that occurs when parsing a specially crafted file. This can allow an unauthenticated attacker to achieve arbitrary code...

Adobe Illustrator Multiple Vulnerabilities (APSB21-42) - Windows

The host is missing an important security update according to Adobe August update. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Adobe Illustrator 2021 post-release reuse vulnerability (CNVD-2021-74115)

Adobe Illustrator 2021 is a vector drawing software. A security vulnerability exists in Adobe Illustrator 2021 25.2.3 and earlier versions when handling specially crafted files. An attacker can exploit the vulnerability to read arbitrary file systems...

Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...