CVE-2022-30645

Adobe Illustrator CVE-2022-30645 affects Illustrator 26.0.2 and earlier and 25.4.5 and earlier, with an out-of-bounds write in SVG file parsing that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Affected p...

CVE-2022-44502

Summary (CVE-2022-44502) : Adobe Illustrator, versions 26.5.1 and earlier, and 27.0 and earlier, are affected by an out-of-bounds read that can disclose sensitive memory. The root cause is a parsing/memory handling flaw in the font parsing flow (per CVE description), enabling information disclosu...

CVE-2012-0780

Adobe Illustrator CS5/CS5.5 (Windows and macOS) is affected by memory corruption vulnerabilities associated with CVE-2012-0780 and related CVEs. The most detailed technical description identifies a stack-based overflow in the text operator Tx within Illustrator CS5 15.0.x (CS5.5/CS5/CS4 family) w...

CVE-2021-28593

CVE-2021-28593 affects Adobe Illustrator 25.2.3 and earlier, with a Use-After-Free flaw triggered while parsing a specially crafted file. An unauthenticated attacker could disclose sensitive information in the context of the current user, and exploitation requires user interaction (victim opens a...

CVE-2024-20791

CVE-2024-20791 affects Adobe Illustrator versions 28.4, 27.9.3 and earlier, due to an out-of-bounds read when parsing a crafted file, which could allow code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). Connected documents also indicat...

CVE-2021-21104

Adobe Illustrator 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file, allowing remote code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). This CVE-2021-21104 entry is ...

CVE-2021-43752

Adobe Illustrator is affected by CVE-2021-43752 in versions 25.4.2 (and earlier) and 26.0.1 (and earlier). The issue is an out-of-bounds read that can disclose memory contents and could be used to bypass mitigations such as ASLR. Exploitation requires the victim to open a malicious file, with use...

CVE-2022-34260

CVE-2022-34260 affects Adobe Illustrator versions 26.3.1 and earlier and 25.4.6 and earlier, due to an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The incident is d...

CVE-2022-34261

Adobe Illustrator CVE-2022-34261 affects versions 26.3.1 and earlier and 25.4.6 and earlier. It is an out-of-bounds read vulnerability in font parsing that could disclose memory and enable ASLR bypass. Exploitation requires user interaction (opening a malicious file). The issue is discussed in th...

CVE-2020-9570

Adobe Illustrator 2020 and earlier (Windows) are affected by CVE-2020-9570, a memory corruption vulnerability in Illustrator 24.0.2 and earlier that could allow arbitrary code execution. The issue is addressed by updating to Illustrator 24.1.2 (as noted in APSB20-20 and corroborated by Threatpost...

CVE-2021-36008

CVE-2021-36008: Adobe Illustrator 25.2.3 and earlier is affected by a Use-after-free in PDF/file parsing that allows an unauthenticated, context-user information disclosure when a crafted file is opened. Exploitation requires user interaction (open a malicious file). The issue is documented acros...

CVE-2022-34263

Adobe Illustrator is affected by CVE-2022-34263 (Use After Free in font parsing) occurring in versions 26.3.1 and earlier and 25.4.6 and earlier, enabling arbitrary code execution in the context of the current user after opening a malicious file. Exploitation requires user interaction. The issue ...

CVE-2022-38408

Adobe Illustrator CVE-2022-38408 is an Improper Input Validation vulnerability affecting versions 26.4 and earlier and 25.4.7 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). The issue is documented unde...

CVE-2007-2244

CVE-2007-2244 corresponds to multiple buffer overflows in Adobe products (Photoshop CS2/CS3, Illustrator CS3, GoLive 9) that can be triggered by BMP, DIB, or RLE images, as noted by NVD with a high CVSS v2 score (9.3). Connected OpenVAS entries (APSB07-16) describe Adobe Illustrator-specific Wind...

CVE-2014-0513

Adobe Illustrator CS6 is affected by CVE-2014-0513 due to a stack-based buffer overflow in versions before 16.0.5 (Windows) and before 16.2.2 (macOS); exploitation could allow remote code execution. The issue is documented under APSB14-11 with affected OS variants (Windows and macOS). Remediation...

CVE-2020-24414

CVE-2020-24414 affects Adobe Illustrator 24.1.2 and earlier, with a memory corruption flaw when parsing a specially crafted .svg file that could lead to arbitrary code execution in the user’s context. Exploitation requires user interaction. Connected sources corroborate multiple related advisorie...

CVE-2022-38436

Adobe Illustrator CVE-2022-38436 is an out-of-bounds read vulnerability in the file parsing path affecting Illustrator 26.4 and earlier and 25.4.7 and earlier. Successful exploitation could enable remote code execution with the user required to open a crafted file and, per linked advisories, reme...

CVE-2021-28591

Adobe Illustrator 25.2.3 and earlier is affected by an Out-of-bounds Write vulnerability in PDF/file parsing that can lead to arbitrary code execution under the current user when a crafted file is opened. Exploitation requires user interaction. The issue is addressed in Illustrator 25.3.0 (APSB21...

CVE-2021-44700

CVE-2021-44700 affects Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier). The issue is an out-of-bounds read that can disclose memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation: update to Illustrator 25.4.3 or 26...

CVE-2025-27167

CVE-2025-27167 affects Adobe Illustrator. The vulnerability is an Untrusted Search Path issue that could allow a local attacker to cause arbitrary code execution or access/modify data by manipulating the search path used to locate critical resources. Affected products include Illustrator versions...

CVE-2021-21103

Adobe Illustrator 25.2 (and earlier) is affected by a memory corruption vulnerability triggered when parsing a specially crafted file. An unauthenticated attacker could disclose memory contents in the context of the current user, with exploitation requiring user interaction (victim must open a ma...

CVE-2010-3152

CVE-2010-3152 affects Adobe Illustrator CS4/CS5 (14.0.0, 15.0.1 and earlier). It is caused by an untrusted search path allowing DLL hijacking via a Trojan horse dwmapi.dll or aires.dll located in the same folder as an .ait/.eps file, enabling arbitrary code execution. Affected versions include CS...

CVE-2012-2026

This CVE entry relates to memory corruption vulnerabilities in Adobe Illustrator, one of several issues affecting Illustrator CS5/CS5.5 and earlier. The connected Kaspersky advisory (KLA10038) explicitly groups CVE-2012-2026 with other memory corruption flaws and lists affected products as Adobe ...

CVE-2020-24411

CVE-2020-24411 affects Adobe Illustrator 24.2 and earlier and is an out-of-bounds write in PDF handling that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction. The connected sources corroborate this as part of APSB20-53; remediation is...

CVE-2022-30638

CVE-2022-30638 affects Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier, via an out-of-bounds write in the font parsing code that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). The i...

CVE-2020-24410

Adobe Illustrator 24.2 and earlier is affected by an out-of-bounds read when parsing crafted PDF files (CVE-2020-24410). The vulnerability can allow arbitrary code execution in the context of the current user and requires user interaction to exploit. Connected sources confirm this is part of the ...

CVE-2020-9572

CVE-2020-9572 applies to Adobe Illustrator 2020 (Windows) versions 24.0.2 and earlier, where a memory corruption vulnerability could enable arbitrary code execution upon exploitation. The connected documents corroborate a memory corruption flaw in Illustrator with potential to run code under the ...

CVE-2021-36009

CVE-2021-36009 affects Adobe Illustrator 25.2.3 and earlier. A memory corruption vulnerability occurs when parsing specially crafted files, allowing an unauthenticated attacker to achieve arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a ma...

CVE-2021-36011

Adobe Illustrator 25.2.3 (and earlier) is affected by CVE-2021-36011, a command injection vulnerability that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The issue requires user interaction and affects both macOS and Windows install...

CVE-2024-49538

CVE-2024-49538 (Adobe Illustrator) is an out-of-bounds write vulnerability affecting Illustrator versions 29.0.0, 28.7.2 and earlier, with arbitrary code execution in the context of the current user. Exploitation requires a user to open a malicious file (user interaction). Multiple sources confir...

CVE-2025-27168

CVE-2025-27168 corresponds to a stack-based buffer overflow in Adobe Illustrator versions 29.2.1, 28.7.4 and earlier that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Affected component: Illust...

CVE-2020-9574

Adobe Illustrator 2020 (versions 24.0.2 and earlier) contains a memory corruption vulnerability that could allow arbitrary code execution. The issue is cited as affecting Illustrator 2020 and was fixed in 24.1.2 (per APSB20-20). Public sources describe potential remote code execution if exploited...

CVE-2023-25861

Adobe Illustrator 26.5.2 and earlier, and 27.2.0 and earlier, are affected by an out-of-bounds write vulnerability (CVE-2023-25861) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the attacker must trick the victim into opening...

CVE-2024-20792

Adobe Illustrator CVE-2024-20792 is a Use-After-Free vulnerability affecting Illustrator 28.4, 27.9.3 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented across mult...

CVE-2025-24449

CVE-2025-24449: Adobe Illustrator (versions 29.2.1, 28.7.4 and earlier) contains an out-of-bounds read vulnerability that could disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file). Adobe released APSB25-17 security updates addre...

CVE-2021-21007

Adobe Illustrator 25.0 and earlier is affected by an uncontrolled search path element that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The issue is tracked as CVE-2021-21007. According to the provided documents,...

CVE-2021-36010

Adobe Illustrator 2021 (version 25.2.3 and earlier) is affected by an out-of-bounds read vulnerability in SVG file parsing that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). The issue is documented across multiple sources (including CVE-20...

CVE-2024-47456

CVE-2024-47456 affects Adobe Illustrator versions 28.7.1 and earlier. The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction; a victim must open a crafted malicious file. Connected sources cor...

CVE-2024-30271

Adobe Illustrator is affected by CVE-2024-30271 and related CVEs (30272, 30273, 20798) as part of APSB24-25. The issues are characterized as out-of-bounds write, stack-based buffer overflow, and out-of-bounds read vulnerabilities in Illustrator versions 28.3, 27.9.2 and earlier, allowing arbitrar...

CVE-2012-2025

CVE-2012-2025 is part of a family of Adobe Illustrator memory‑corruption vulnerabilities (e.g., CVE-2012-0780, CVE-2012-2042, CVE-2012-2023/2024/2026). Connected advisories show affected products are Adobe Illustrator CS5/CS5.5 (and earlier) with multiple unspecified or TX‑operator related memory...

CVE-2020-9575

CVE-2020-9575 affects Adobe Illustrator; versions 24.1.2 and earlier are vulnerable to a memory corruption issue that could allow arbitrary code execution. The connected NT/ vendor advisories reference an Adobe APSB20-37 patch, with a remediation path to upgrade to a fixed release (e.g., 24.2.0 o...

CVE-2021-21102

CVE-2021-21102 affects Adobe Illustrator 25.2 and earlier. A Path Traversal vulnerability in the parser allows arbitrary code execution in the user context when a specially crafted file is opened; exploitation requires user interaction. Documents confirm multiple advisories (APSB21-24)/Nessus ent...

CVE-2022-34262

CVE-2022-34262 affects Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected advisories confirm multiple flaws in Illustrator a...

CVE-2024-34133

Adobe Illustrator CVE-2024-34133 is an out-of-bounds write vulnerability affecting Illustrator versions 28.5, 27.9.4 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). This CVE is listed ...

CVE-2025-27169

Affected software: Adobe Illustrator versions 29.2.1, 28.7.4 and earlier. Vulnerability: Out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Root cause / impact (as described): An out-of-bounds write vulnerability exists in Illustrator that ...

CVE-2025-21160

CVE-2025-21160 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. It is caused by an Integer Underflow (Wrap or Wraparound) in a component/file that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a ...

CVE-2025-27170

Adobe Illustrator CVE-2025-27170 describes a NULL Pointer Dereference affecting Illustrator versions 29.2.1, 28.7.4 and earlier, which can crash the application and cause a denial-of-service. Exploitation requires a user opening a malicious file (user interaction). Root cause: NULL pointer derefe...

CVE-2012-2042

CVE-2012-2042 concerns memory corruption in Adobe Illustrator, described as allowing arbitrary code execution or denial of service via unspecified vectors, affecting Illustrator before CS6. Connected sources indicate multiple memory-corruption vulnerabilities in Illustrator CS5/CS5.5 (15.1 and ea...

CVE-2020-9571

CVE-2020-9571 affects Adobe Illustrator 24.0.2 and earlier and is described as a memory corruption vulnerability that could lead to arbitrary code execution. Connected documents confirm the issue is tied to Illustrator’s memory corruption and indicate a fix was released: Illustrator 2020 version ...

CVE-2024-34138

CVE-2024-34138 affects Adobe Illustrator versions 28.5, 27.9.4 and earlier and is caused by a NULL pointer dereference that can crash the application, leading to a denial-of-service condition. Exploitation requires the victim to open a malicious file, i.e., user interaction is needed. The issue i...