CVE-2024-34136

CVE-2024-34136 affects Adobe Illustrator versions 28.5, 27.9.4 and earlier. The vulnerability is a NULL Pointer Dereference leading to an application DoS. Exploitation requires user interaction (victim opens a malicious file); no exploit details are provided in the documents. Affected products an...

CVE-2024-41856

CVE-2024-41856 affects Adobe Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier, due to Improper Input Validation that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Connected sources indicate mu...

CVE-2025-21160

CVE-2025-21160 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. It is caused by an Integer Underflow (Wrap or Wraparound) in a component/file that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a ...

CVE-2025-27169

Affected software: Adobe Illustrator versions 29.2.1, 28.7.4 and earlier. Vulnerability: Out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Root cause / impact (as described): An out-of-bounds write vulnerability exists in Illustrator that ...

CVE-2012-2023

Summary (based on connected docs): CVE-2012-2023 is part of a family of Adobe Illustrator memory‑corruption flaws affecting Illustrator prior to CS6 (CS5/CS5.5/CS4 range cited in sources), with multiple CVEs (e.g., CVE-2012-0780, CVE-2012-2042, CVE-2012-2024/25/26) referenced. The KLA10038 adviso...

CVE-2020-9573

CVE-2020-9573 affects Adobe Illustrator 2020 (versions 24.0.2 and earlier). The vulnerability is a memory corruption flaw in Illustrator that could allow arbitrary code execution when exploited. Public sources describe the impact as high, with attack vectors tied to local access and user interact...

CVE-2022-34262

CVE-2022-34262 affects Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected advisories confirm multiple flaws in Illustrator a...

CVE-2012-2042

CVE-2012-2042 concerns memory corruption in Adobe Illustrator, described as allowing arbitrary code execution or denial of service via unspecified vectors, affecting Illustrator before CS6. Connected sources indicate multiple memory-corruption vulnerabilities in Illustrator CS5/CS5.5 (15.1 and ea...

CVE-2024-41857

Adobe Illustrator is affected by CVE-2024-41857 (Integer Underflow) in versions 28.6, 27.9.5 and earlier, enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected product/versions noted in multiple sources; advisory APSB2...

CVE-2025-27170

Adobe Illustrator CVE-2025-27170 describes a NULL Pointer Dereference affecting Illustrator versions 29.2.1, 28.7.4 and earlier, which can crash the application and cause a denial-of-service. Exploitation requires a user opening a malicious file (user interaction). Root cause: NULL pointer derefe...

CVE-2026-48334

CVE-2026-48334 in Adobe Illustrator: An Improper Input Validation (CWE-20) vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVE notes that the scope is changed. Based on the pro...

CVE-2009-3952

Adobe Illustrator CVE-2009-3952 is a buffer overflow vulnerability affecting Illustrator CS3 (13.0.3 and earlier) and CS4 (14.0.0). The flaw allows arbitrary code execution through an overflow in handling specific content, with vectors not publicly specified in the provided docs. Public reference...

CVE-2024-20793

CVE-2024-20793 affects Adobe Illustrator versions 28.4, 27.9.3 and earlier, due to an out-of-bounds read that can disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious file). Public references consistently describe this as part of A...

CVE-2024-30272

CVE-2024-30272 affects Adobe Illustrator versions 28.3, 27.9.2 and earlier. It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the current user context . Exploitation requires user interaction (opening a malicious file). Connected sources also list related C...

CVE-2024-43759

CVE-2024-43759 affects Adobe Illustrator v8: versions 28.6, 27.9.5 and earlier are vulnerable to a NULL pointer dereference that can crash the application, causing a DoS. Exploitation requires user interaction; a victim must open a malicious file. The issue is one of multiple vulnerabilities desc...

CVE-2024-45114

Adobe Illustrator 28.7.1 and earlier suffers an out-of-bounds write (CWE-787) that can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected platforms include Windows and macOS; vulnerability identif...

CVE-2025-21159

CVE-2025-21159 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. The issue is a Use‑After‑Free vulnerability in Illustrator that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (a victim must open a malicious file). A securit...

CVE-2020-9641

CVE-2020-9641 affects Adobe Illustrator up to version 24.1.2. The vulnerability is described as a memory corruption issue in Illustrator that could allow arbitrary code execution on a local attack vector. The CVE is discussed in multiple sources (NVD, Red Hat, and Nessus references) with consiste...

CVE-2008-3961

The CVE-2008-3961 entry corresponds to Adobe Illustrator CS2 on Macintosh and describes multiple unspecified vulnerabilities that allow user-assisted attackers to execute arbitrary code via a crafted AI file. The vulnerability is rated high (CVSS v2 base score 9.3) with complete impact on confide...

CVE-2025-24448

CVE-2025-24448 affects Adobe Illustrator versions 29.2.1, 28.7.4 and earlier due to an out-of-bounds read in Illustrator. The issue can disclose sensitive memory and could bypass ASLR; exploitation requires user interaction (victim opens a malicious file). Multiple other sources corroborate the v...

CVE-2021-28592

Adobe Illustrator 25.2.3 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file (CVE-2021-28592). An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploitation requiring user interaction (vi...

CVE-2023-47063

CVE-2023-47063 concerns Adobe Illustrator 28.0 and earlier, and 27.9 and earlier, with an out-of-bounds write that could allow arbitrary code execution in the caller’s context. Exploitation requires the user to open a malicious file (user interaction). Fixed: updates to Illustrator 27.9.1 and 28....

CVE-2012-2024

Adobe Illustrator CVE-2012-2024 is listed among multiple memory-corruption vulnerabilities in Illustrator CS5/CS5.5 and earlier. According to Kaspersky (KLA10038), affected products include Adobe Illustrator versions 15.1 and earlier for Windows and macOS, with impacts including Arbitrary Code Ex...

CVE-2020-9640

Adobe Illustrator is affected by CVE-2020-9640 (memory corruption) in versions 24.1.2 and earlier, with successful exploitation potentially allowing arbitrary code execution. Connected sources corroborate that this vulnerability affects Illustrator on multiple platforms and is addressed in the AP...

CVE-2023-47074

Adobe Illustrator is affected by an out-of-bounds read vulnerability in the JP2/file parsing path affecting Illustrator 28.0 and earlier and 27.9 and earlier. The issue can lead to code execution in the context of the targeted user when a crafted file is opened, with user interaction required. Mi...

CVE-2025-21163

Adobe Illustrator (versions 29.1, 28.7.3 and earlier) contains a Stack-based Buffer Overflow vulnerability (CWE-121) that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Root cause: improper validation of input data boundaries during file p...

CVE-2022-38409

Adobe Illustrator CVE-2022-38409 describes an out-of-bounds read affecting Illustrator 26.4 and earlier and 25.4.7 and earlier, enabling memory disclosure and ASLR bypass. Exploitation requires user interaction (opening a malicious file). Connected sources corroborate the same vulnerability and r...

CVE-2024-45111

The CVE-2024-45111 issue affects Adobe Illustrator versions 28.6, 27.9.5 and earlier, due to an out-of-bounds read in a component. This can disclose sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected products are Adobe Illu...

CVE-2024-47457

Adobe Illustrator CVE-2024-47457 describes a NULL Pointer Dereference vulnerability in Illustrator

CVE-2024-49541

Adobe Illustrator is affected by CVE-2024-49541 (and related CVEs) describing an out-of-bounds read vulnerability in Illustrator 29.0.0, 28.7.2 and earlier that could disclose memory, and an out-of-bounds write vulnerability that could allow arbitrary code execution. Exploitation requires user in...

CVE-2020-9642

CVE-2020-9642 affects Adobe Illustrator versions 24.1.2 and earlier. Multiple connected sources describe a buffer error/vulnerability that could allow arbitrary code execution. The issue is fixed in Illustrator 24.2.0 (APSB20-37); mitigation is to update to 24.2.0 or later. This is evidenced acro...

CVE-2024-47451

Adobe Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-47451) that could lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a specially crafted file, with user interaction needed. Root...

CVE-2024-47455

Adobe Illustrator CVE-2024-47455 is an out-of-bounds read affecting versions 28.7.1 and earlier, enabling potential memory disclosure and ASLR bypass when a user opens a malicious file. Connected advisories indicate updates are available (APSB24-87); updating to 28.7.2 or newer mitigates these vu...

CVE-2024-43758

CVE-2024-43758 affects Adobe Illustrator versions up to 28.6 and 27.9.5 and earlier, with a Use After Free condition that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The issue is part of a set of vulnerab...

CVE-2024-47454

CVE-2024-47454 affects Adobe Illustrator up to version 28.7.1, with an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected advisories indicate Adobe released fixes in APSB24-87 (update to 28...

CVE-2024-34134

Adobe Illustrator is affected by an out-of-bounds read vulnerability (CVE-2024-34134) in versions 28.5, 27.9.4 and earlier, enabling memory disclosure and bypass of ASLR. Exploitation requires the user to open a malicious file. Multiple connected sources (NVD/CVE records, APSB24-45 references, an...

CVE-2024-47450

CVE-2024-47450 affects Adobe Illustrator up to version 28.7.1 and is a Heap-based Buffer Overflow that could allow arbitrary code execution in the context of the current user when a specially crafted file is opened. Exploitation requires user interaction (opening a malicious file). An official fi...

CVE-2024-47453

CVE-2024-47453 affects Adobe Illustrator versions 28.7.1 and earlier, with an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires the victim to open a malicious file, and the issue is mitigated by the Adobe APSB24-87 updates (Illustrator 28.7...

CVE-2025-30330

CVE-2025-30330 affects Adobe Illustrator versions 29.3, 28.7.5 and earlier. The issue is a heap-based buffer overflow in Illustrator when handling files, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Public...

CVE-2023-47075

Adobe Illustrator is affected by a Use-After-Free vulnerability in the JP2 parsing path that could allow arbitrary code execution when a victim opens a crafted file. Root cause: use-after-free in the JP2 parser. Impact: code execution in the context of the current user; exploitation requires user...

CVE-2024-47452

Adobe Illustrator 28.7.1 and earlier is affected by CVE-2024-47452, an out-of-bounds write that could execute arbitrary code in the context of the current user. Exploitation requires the user to open a crafted file. Affected versions should be updated to 28.7.2 or later per APSB24-87; advisories ...

CVE-2026-21333

CVE-2026-21333 affects Adobe Illustrator of versions 29.8.4, 30.1 and earlier, with an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file (user interaction). Remediatio...

CVE-2024-34135

Adobe Illustrator is affected by CVE-2024-34135 and related issues in versions 28.5, 27.9.4 and earlier, due to an out-of-bounds read that could disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The published advisory APSB24-45 de...

CVE-2025-49563

Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Affected versions: 28.7.8, 29.6.1 and earlier. Exploitation requires user interaction (victim must open a malicious file). Remediation: apply the securit...

CVE-2026-48337

CVE-2026-48337 affects Adobe Illustrator and is a vulnerability of type out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. The issue requires the user to open a malicious file, indicating a user interaction prerequisite and a local attack v...

CVE-2026-34687

CVE-2026-34687 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The connected d...

CVE-2026-21288

Adobe Illustrator version 29.8.3, 30.0 and earlier is affected by a NULL Pointer Dereference that can crash the application and cause denial-of-service; exploitation requires a user to open a malicious file. Connected advisories confirm fixes have been released (APSB26-03) with updates to address...

CVE-2026-48335

CVE-2026-48335 affects Adobe Illustrator and describes an out-of-bounds write (CWE-787) vulnerability that could permit arbitrary code execution in the context of the current user. The flaw requires the victim to open a malicious file (user interaction) to trigger exploitation. The CVSS 3.1 base ...

CVE-2025-49530

Adobe Illustrator is affected by an out-of-bounds write vulnerability (CVE-2025-49530) in versions 28.7.6, 29.5.1 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Root cause described acr...

CVE-2026-27271

CVE-2026-27271 is a heap-based buffer overflow in Adobe Illustrator affecting versions 29.8.4, 30.1 and earlier. The issue could allow arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Remediation: update to fixed versio...