CVE-2010-3152

CVE-2010-3152 affects Adobe Illustrator CS4/CS5 (14.0.0, 15.0.1 and earlier). It is caused by an untrusted search path allowing DLL hijacking via a Trojan horse dwmapi.dll or aires.dll located in the same folder as an .ait/.eps file, enabling arbitrary code execution. Affected versions include CS...

CVE-2024-41856

CVE-2024-41856 affects Adobe Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier, due to Improper Input Validation that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Connected sources indicate mu...

CVE-2020-24410

Adobe Illustrator 24.2 and earlier is affected by an out-of-bounds read when parsing crafted PDF files (CVE-2020-24410). The vulnerability can allow arbitrary code execution in the context of the current user and requires user interaction to exploit. Connected sources confirm this is part of the ...

CVE-2024-43759

CVE-2024-43759 affects Adobe Illustrator v8: versions 28.6, 27.9.5 and earlier are vulnerable to a NULL pointer dereference that can crash the application, causing a DoS. Exploitation requires user interaction; a victim must open a malicious file. The issue is one of multiple vulnerabilities desc...

CVE-2024-45114

Adobe Illustrator 28.7.1 and earlier suffers an out-of-bounds write (CWE-787) that can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected platforms include Windows and macOS; vulnerability identif...

CVE-2023-47063

CVE-2023-47063 concerns Adobe Illustrator 28.0 and earlier, and 27.9 and earlier, with an out-of-bounds write that could allow arbitrary code execution in the caller’s context. Exploitation requires the user to open a malicious file (user interaction). Fixed: updates to Illustrator 27.9.1 and 28....

CVE-2024-20793

CVE-2024-20793 affects Adobe Illustrator versions 28.4, 27.9.3 and earlier, due to an out-of-bounds read that can disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious file). Public references consistently describe this as part of A...

CVE-2025-21160

CVE-2025-21160 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. It is caused by an Integer Underflow (Wrap or Wraparound) in a component/file that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a ...

CVE-2012-2023

Summary (based on connected docs): CVE-2012-2023 is part of a family of Adobe Illustrator memory‑corruption flaws affecting Illustrator prior to CS6 (CS5/CS5.5/CS4 range cited in sources), with multiple CVEs (e.g., CVE-2012-0780, CVE-2012-2042, CVE-2012-2024/25/26) referenced. The KLA10038 adviso...

CVE-2020-9639

Adobe Illustrator is affected by CVE-2020-9639—memory corruption that could allow arbitrary code execution. The vulnerability is present in Illustrator versions 24.1.2 and earlier. The issue is documented in Adobe APSB20-37; remediation is to update to version 24.2.0 or later. Several other sourc...

CVE-2021-21102

CVE-2021-21102 affects Adobe Illustrator 25.2 and earlier. A Path Traversal vulnerability in the parser allows arbitrary code execution in the user context when a specially crafted file is opened; exploitation requires user interaction. Documents confirm multiple advisories (APSB21-24)/Nessus ent...

CVE-2024-30272

CVE-2024-30272 affects Adobe Illustrator versions 28.3, 27.9.2 and earlier. It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the current user context . Exploitation requires user interaction (opening a malicious file). Connected sources also list related C...

CVE-2025-24448

CVE-2025-24448 affects Adobe Illustrator versions 29.2.1, 28.7.4 and earlier due to an out-of-bounds read in Illustrator. The issue can disclose sensitive memory and could bypass ASLR; exploitation requires user interaction (victim opens a malicious file). Multiple other sources corroborate the v...

CVE-2020-9573

CVE-2020-9573 affects Adobe Illustrator 2020 (versions 24.0.2 and earlier). The vulnerability is a memory corruption flaw in Illustrator that could allow arbitrary code execution when exploited. Public sources describe the impact as high, with attack vectors tied to local access and user interact...

CVE-2022-34262

CVE-2022-34262 affects Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected advisories confirm multiple flaws in Illustrator a...

CVE-2025-27170

Adobe Illustrator CVE-2025-27170 describes a NULL Pointer Dereference affecting Illustrator versions 29.2.1, 28.7.4 and earlier, which can crash the application and cause a denial-of-service. Exploitation requires a user opening a malicious file (user interaction). Root cause: NULL pointer derefe...

CVE-2022-38409

Adobe Illustrator CVE-2022-38409 describes an out-of-bounds read affecting Illustrator 26.4 and earlier and 25.4.7 and earlier, enabling memory disclosure and ASLR bypass. Exploitation requires user interaction (opening a malicious file). Connected sources corroborate the same vulnerability and r...

CVE-2024-43758

CVE-2024-43758 affects Adobe Illustrator versions up to 28.6 and 27.9.5 and earlier, with a Use After Free condition that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The issue is part of a set of vulnerab...

CVE-2024-45111

The CVE-2024-45111 issue affects Adobe Illustrator versions 28.6, 27.9.5 and earlier, due to an out-of-bounds read in a component. This can disclose sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected products are Adobe Illu...

CVE-2025-30330

CVE-2025-30330 affects Adobe Illustrator versions 29.3, 28.7.5 and earlier. The issue is a heap-based buffer overflow in Illustrator when handling files, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Public...

CVE-2012-2042

CVE-2012-2042 concerns memory corruption in Adobe Illustrator, described as allowing arbitrary code execution or denial of service via unspecified vectors, affecting Illustrator before CS6. Connected sources indicate multiple memory-corruption vulnerabilities in Illustrator CS5/CS5.5 (15.1 and ea...

CVE-2020-9641

CVE-2020-9641 affects Adobe Illustrator up to version 24.1.2. The vulnerability is described as a memory corruption issue in Illustrator that could allow arbitrary code execution on a local attack vector. The CVE is discussed in multiple sources (NVD, Red Hat, and Nessus references) with consiste...

CVE-2023-47074

Adobe Illustrator is affected by an out-of-bounds read vulnerability in the JP2/file parsing path affecting Illustrator 28.0 and earlier and 27.9 and earlier. The issue can lead to code execution in the context of the targeted user when a crafted file is opened, with user interaction required. Mi...

CVE-2025-21159

CVE-2025-21159 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. The issue is a Use‑After‑Free vulnerability in Illustrator that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (a victim must open a malicious file). A securit...

CVE-2012-2024

Adobe Illustrator CVE-2012-2024 is listed among multiple memory-corruption vulnerabilities in Illustrator CS5/CS5.5 and earlier. According to Kaspersky (KLA10038), affected products include Adobe Illustrator versions 15.1 and earlier for Windows and macOS, with impacts including Arbitrary Code Ex...

CVE-2024-47457

Adobe Illustrator CVE-2024-47457 describes a NULL Pointer Dereference vulnerability in Illustrator

CVE-2024-49541

Adobe Illustrator is affected by CVE-2024-49541 (and related CVEs) describing an out-of-bounds read vulnerability in Illustrator 29.0.0, 28.7.2 and earlier that could disclose memory, and an out-of-bounds write vulnerability that could allow arbitrary code execution. Exploitation requires user in...

CVE-2024-34134

Adobe Illustrator is affected by an out-of-bounds read vulnerability (CVE-2024-34134) in versions 28.5, 27.9.4 and earlier, enabling memory disclosure and bypass of ASLR. Exploitation requires the user to open a malicious file. Multiple connected sources (NVD/CVE records, APSB24-45 references, an...

CVE-2024-47451

Adobe Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-47451) that could lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a specially crafted file, with user interaction needed. Root...

CVE-2026-21333

CVE-2026-21333 affects Adobe Illustrator of versions 29.8.4, 30.1 and earlier, with an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file (user interaction). Remediatio...

CVE-2008-3961

The CVE-2008-3961 entry corresponds to Adobe Illustrator CS2 on Macintosh and describes multiple unspecified vulnerabilities that allow user-assisted attackers to execute arbitrary code via a crafted AI file. The vulnerability is rated high (CVSS v2 base score 9.3) with complete impact on confide...

CVE-2025-21163

Adobe Illustrator (versions 29.1, 28.7.3 and earlier) contains a Stack-based Buffer Overflow vulnerability (CWE-121) that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Root cause: improper validation of input data boundaries during file p...

CVE-2009-3952

Adobe Illustrator CVE-2009-3952 is a buffer overflow vulnerability affecting Illustrator CS3 (13.0.3 and earlier) and CS4 (14.0.0). The flaw allows arbitrary code execution through an overflow in handling specific content, with vectors not publicly specified in the provided docs. Public reference...

CVE-2020-9640

Adobe Illustrator is affected by CVE-2020-9640 (memory corruption) in versions 24.1.2 and earlier, with successful exploitation potentially allowing arbitrary code execution. Connected sources corroborate that this vulnerability affects Illustrator on multiple platforms and is addressed in the AP...

CVE-2020-9642

CVE-2020-9642 affects Adobe Illustrator versions 24.1.2 and earlier. Multiple connected sources describe a buffer error/vulnerability that could allow arbitrary code execution. The issue is fixed in Illustrator 24.2.0 (APSB20-37); mitigation is to update to 24.2.0 or later. This is evidenced acro...

CVE-2024-47450

CVE-2024-47450 affects Adobe Illustrator up to version 28.7.1 and is a Heap-based Buffer Overflow that could allow arbitrary code execution in the context of the current user when a specially crafted file is opened. Exploitation requires user interaction (opening a malicious file). An official fi...

CVE-2021-28592

Adobe Illustrator 25.2.3 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file (CVE-2021-28592). An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploitation requiring user interaction (vi...

CVE-2024-47454

CVE-2024-47454 affects Adobe Illustrator up to version 28.7.1, with an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected advisories indicate Adobe released fixes in APSB24-87 (update to 28...

CVE-2024-47455

Adobe Illustrator CVE-2024-47455 is an out-of-bounds read affecting versions 28.7.1 and earlier, enabling potential memory disclosure and ASLR bypass when a user opens a malicious file. Connected advisories indicate updates are available (APSB24-87); updating to 28.7.2 or newer mitigates these vu...

CVE-2023-47075

Adobe Illustrator is affected by a Use-After-Free vulnerability in the JP2 parsing path that could allow arbitrary code execution when a victim opens a crafted file. Root cause: use-after-free in the JP2 parser. Impact: code execution in the context of the current user; exploitation requires user...

CVE-2024-47453

CVE-2024-47453 affects Adobe Illustrator versions 28.7.1 and earlier, with an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires the victim to open a malicious file, and the issue is mitigated by the Adobe APSB24-87 updates (Illustrator 28.7...

CVE-2026-48275

CVE-2026-48275 : Illustrator is affected by an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file) and the issue involves a scope change . The CVSS da...

CVE-2026-48335

CVE-2026-48335 affects Adobe Illustrator and describes an out-of-bounds write (CWE-787) vulnerability that could permit arbitrary code execution in the context of the current user. The flaw requires the victim to open a malicious file (user interaction) to trigger exploitation. The CVSS 3.1 base ...

CVE-2025-49564

Adobe Illustrator is affected by CVE-2025-49564: stack-based buffer overflow in versions 28.7.8, 29.6.1 and earlier that can lead to arbitrary code execution. Exploitation requires user interaction (opening a malicious file). The issue is documented across multiple sources (Adobe advisory APSB25-...

CVE-2024-34135

Adobe Illustrator is affected by CVE-2024-34135 and related issues in versions 28.5, 27.9.4 and earlier, due to an out-of-bounds read that could disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The published advisory APSB24-45 de...

CVE-2024-47452

Adobe Illustrator 28.7.1 and earlier is affected by CVE-2024-47452, an out-of-bounds write that could execute arbitrary code in the context of the current user. Exploitation requires the user to open a crafted file. Affected versions should be updated to 28.7.2 or later per APSB24-87; advisories ...

CVE-2026-48337

CVE-2026-48337 affects Adobe Illustrator and is a vulnerability of type out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. The issue requires the user to open a malicious file, indicating a user interaction prerequisite and a local attack v...

CVE-2026-21280

Adobe Illustrator 29.8.3, 30.0 and earlier are affected by CVE-2026-21280, an Untrusted Search Path vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the attacker must entice the victim to open a malicious file, and...

CVE-2026-27267

CVE-2026-27267 — Illustrator stack-based buffer overflow . Affected: Adobe Illustrator versions 29.8.4, 30.1 and earlier. Description confirms a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (...

CVE-2025-49530

Adobe Illustrator is affected by an out-of-bounds write vulnerability (CVE-2025-49530) in versions 28.7.6, 29.5.1 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Root cause described acr...