CVE-2021-21105

Adobe Illustrator 25.2 (and earlier) contains a memory corruption vulnerability when parsing a specially crafted file, leading to remote code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Multiple connected advisories confirm...

CVE-2021-21104 Adobe Illustrator memory corruption vulnerability could lead to remote code execution

Adobe Illustrator version 25.2 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2021-21104

Adobe Illustrator 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file, allowing remote code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). This CVE-2021-21104 entry is ...

CVE-2021-21103 Adobe Illustrator memory corruption vulnerability could lead to information disclosure

Adobe Illustrator version 25.2 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue...

CVE-2021-21103

Adobe Illustrator 25.2 (and earlier) is affected by a memory corruption vulnerability triggered when parsing a specially crafted file. An unauthenticated attacker could disclose memory contents in the context of the current user, with exploitation requiring user interaction (victim must open a ma...

CVE-2021-21105: Access of Memory Location After End of Buffer

Adobe Illustrator version 25.2 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires...

CVE-2021-21104: Access of Memory Location After End of Buffer

Adobe Illustrator version 25.2 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2021-21103: Access of Memory Location After End of Buffer

Adobe Illustrator version 25.2 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue...

Adobe Illustrator 2021 OS Command Injection Vulnerability

Adobe Illustrator 2021 is a vector graphics software. Adobe Illustrator 2021 version 25.2.3 and earlier is vulnerable to a security flaw. An attacker can exploit this vulnerability to achieve arbitrary code execution in the context of the current user...

Adobe Illustrator 2021 out-of-bounds read vulnerability

Adobe Illustrator 2021 is a vector drawing software. Adobe Illustrator 2021 25.2.3 and earlier versions contain an out-of-bounds read vulnerability when handling specially crafted files. An attacker could exploit this vulnerability to cause a memory leak...

Adobe Illustrator 2021 Memory Corruption Vulnerability (CNVD-2021-74110)

Adobe Illustrator 2021 is a vector drawing software. A memory corruption vulnerability exists in Adobe Illustrator 2021 25.2.3 and earlier versions when processing specially crafted files. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2021-36010

Adobe Illustrator version 25.2.3 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must ope...

CVE-2021-36011

Adobe Illustrator version 25.2.3 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-36009

Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-36008

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

CVE-2021-36011

Adobe Illustrator version 25.2.3 and earlier is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

CVE-2021-36009

Adobe Illustrator version 25.2.3 and earlier is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-36010

Adobe Illustrator version 25.2.3 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must ope...

CVE-2021-36008

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

CVE-2021-28591

Adobe Illustrator version 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...