CVE-2009-3952

Adobe Illustrator CVE-2009-3952 is a buffer overflow vulnerability affecting Illustrator CS3 (13.0.3 and earlier) and CS4 (14.0.0). The flaw allows arbitrary code execution through an overflow in handling specific content, with vectors not publicly specified in the provided docs. Public reference...

CVE-2012-2023

Summary (based on connected docs): CVE-2012-2023 is part of a family of Adobe Illustrator memory‑corruption flaws affecting Illustrator prior to CS6 (CS5/CS5.5/CS4 range cited in sources), with multiple CVEs (e.g., CVE-2012-0780, CVE-2012-2042, CVE-2012-2024/25/26) referenced. The KLA10038 adviso...

CVE-2020-9573

CVE-2020-9573 affects Adobe Illustrator 2020 (versions 24.0.2 and earlier). The vulnerability is a memory corruption flaw in Illustrator that could allow arbitrary code execution when exploited. Public sources describe the impact as high, with attack vectors tied to local access and user interact...

CVE-2020-9639

Adobe Illustrator is affected by CVE-2020-9639—memory corruption that could allow arbitrary code execution. The vulnerability is present in Illustrator versions 24.1.2 and earlier. The issue is documented in Adobe APSB20-37; remediation is to update to version 24.2.0 or later. Several other sourc...

CVE-2023-25860

CVE-2023-25860 affects Adobe Illustrator 26.5.2 and earlier, and 27.2.0 and earlier. The vulnerability is an out-of-bounds write that could lead to arbitrary code execution in the context of the current user and requires the victim to open a crafted file (user interaction). Affected versions are ...

CVE-2024-30273

CVE-2024-30273 (Adobe Illustrator) affects Illustrator versions 28.3, 27.9.2 and earlier. The issue is a stack-based buffer overflow in PS file parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). ...

CVE-2024-34136

CVE-2024-34136 affects Adobe Illustrator versions 28.5, 27.9.4 and earlier. The vulnerability is a NULL Pointer Dereference leading to an application DoS. Exploitation requires user interaction (victim opens a malicious file); no exploit details are provided in the documents. Affected products an...

CVE-2024-20793

CVE-2024-20793 affects Adobe Illustrator versions 28.4, 27.9.3 and earlier, due to an out-of-bounds read that can disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious file). Public references consistently describe this as part of A...

CVE-2024-41856

CVE-2024-41856 affects Adobe Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier, due to Improper Input Validation that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Connected sources indicate mu...

CVE-2024-41857

Adobe Illustrator is affected by CVE-2024-41857 (Integer Underflow) in versions 28.6, 27.9.5 and earlier, enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected product/versions noted in multiple sources; advisory APSB2...

CVE-2024-43759

CVE-2024-43759 affects Adobe Illustrator v8: versions 28.6, 27.9.5 and earlier are vulnerable to a NULL pointer dereference that can crash the application, causing a DoS. Exploitation requires user interaction; a victim must open a malicious file. The issue is one of multiple vulnerabilities desc...

CVE-2024-45114

Adobe Illustrator 28.7.1 and earlier suffers an out-of-bounds write (CWE-787) that can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected platforms include Windows and macOS; vulnerability identif...

CVE-2023-25862

Adobe Illustrator is affected by an out-of-bounds read in font parsing that can disclose memory contents and bypass ASLR. Affected: Illustrator 26.5.2 and earlier and 27.2.0 and earlier. Impact requires user interaction (victim must open a malicious file); CVE-2023-25862. Remediation: update to I...

CVE-2024-30272

CVE-2024-30272 affects Adobe Illustrator versions 28.3, 27.9.2 and earlier. It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the current user context . Exploitation requires user interaction (opening a malicious file). Connected sources also list related C...

CVE-2024-34137

CVE-2024-34137 affects Adobe Illustrator 28.5, 27.9.4 and earlier with a NULL pointer dereference in CGM/file parsing that can crash the application and cause DoS. Exploitation requires user interaction (opening a malicious file). Connected sources confirm the affected versions and the vulnerabil...

CVE-2008-3961

The CVE-2008-3961 entry corresponds to Adobe Illustrator CS2 on Macintosh and describes multiple unspecified vulnerabilities that allow user-assisted attackers to execute arbitrary code via a crafted AI file. The vulnerability is rated high (CVSS v2 base score 9.3) with complete impact on confide...

CVE-2025-24448

CVE-2025-24448 affects Adobe Illustrator versions 29.2.1, 28.7.4 and earlier due to an out-of-bounds read in Illustrator. The issue can disclose sensitive memory and could bypass ASLR; exploitation requires user interaction (victim opens a malicious file). Multiple other sources corroborate the v...

CVE-2020-9641

CVE-2020-9641 affects Adobe Illustrator up to version 24.1.2. The vulnerability is described as a memory corruption issue in Illustrator that could allow arbitrary code execution on a local attack vector. The CVE is discussed in multiple sources (NVD, Red Hat, and Nessus references) with consiste...

CVE-2021-28592

Adobe Illustrator 25.2.3 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file (CVE-2021-28592). An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploitation requiring user interaction (vi...

CVE-2025-21159

CVE-2025-21159 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. The issue is a Use‑After‑Free vulnerability in Illustrator that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (a victim must open a malicious file). A securit...

CVE-2025-21163

Adobe Illustrator (versions 29.1, 28.7.3 and earlier) contains a Stack-based Buffer Overflow vulnerability (CWE-121) that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Root cause: improper validation of input data boundaries during file p...

CVE-2012-2024

Adobe Illustrator CVE-2012-2024 is listed among multiple memory-corruption vulnerabilities in Illustrator CS5/CS5.5 and earlier. According to Kaspersky (KLA10038), affected products include Adobe Illustrator versions 15.1 and earlier for Windows and macOS, with impacts including Arbitrary Code Ex...

CVE-2024-45111

The CVE-2024-45111 issue affects Adobe Illustrator versions 28.6, 27.9.5 and earlier, due to an out-of-bounds read in a component. This can disclose sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected products are Adobe Illu...

CVE-2024-49541

Adobe Illustrator is affected by CVE-2024-49541 (and related CVEs) describing an out-of-bounds read vulnerability in Illustrator 29.0.0, 28.7.2 and earlier that could disclose memory, and an out-of-bounds write vulnerability that could allow arbitrary code execution. Exploitation requires user in...

CVE-2023-47074

Adobe Illustrator is affected by an out-of-bounds read vulnerability in the JP2/file parsing path affecting Illustrator 28.0 and earlier and 27.9 and earlier. The issue can lead to code execution in the context of the targeted user when a crafted file is opened, with user interaction required. Mi...

CVE-2024-47455

Adobe Illustrator CVE-2024-47455 is an out-of-bounds read affecting versions 28.7.1 and earlier, enabling potential memory disclosure and ASLR bypass when a user opens a malicious file. Connected advisories indicate updates are available (APSB24-87); updating to 28.7.2 or newer mitigates these vu...

CVE-2022-38409

Adobe Illustrator CVE-2022-38409 describes an out-of-bounds read affecting Illustrator 26.4 and earlier and 25.4.7 and earlier, enabling memory disclosure and ASLR bypass. Exploitation requires user interaction (opening a malicious file). Connected sources corroborate the same vulnerability and r...

CVE-2023-47063

CVE-2023-47063 concerns Adobe Illustrator 28.0 and earlier, and 27.9 and earlier, with an out-of-bounds write that could allow arbitrary code execution in the caller’s context. Exploitation requires the user to open a malicious file (user interaction). Fixed: updates to Illustrator 27.9.1 and 28....

CVE-2024-47454

CVE-2024-47454 affects Adobe Illustrator up to version 28.7.1, with an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected advisories indicate Adobe released fixes in APSB24-87 (update to 28...

CVE-2020-9640

Adobe Illustrator is affected by CVE-2020-9640 (memory corruption) in versions 24.1.2 and earlier, with successful exploitation potentially allowing arbitrary code execution. Connected sources corroborate that this vulnerability affects Illustrator on multiple platforms and is addressed in the AP...

CVE-2024-47450

CVE-2024-47450 affects Adobe Illustrator up to version 28.7.1 and is a Heap-based Buffer Overflow that could allow arbitrary code execution in the context of the current user when a specially crafted file is opened. Exploitation requires user interaction (opening a malicious file). An official fi...

CVE-2025-30330

CVE-2025-30330 affects Adobe Illustrator versions 29.3, 28.7.5 and earlier. The issue is a heap-based buffer overflow in Illustrator when handling files, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Public...

CVE-2020-9642

CVE-2020-9642 affects Adobe Illustrator versions 24.1.2 and earlier. Multiple connected sources describe a buffer error/vulnerability that could allow arbitrary code execution. The issue is fixed in Illustrator 24.2.0 (APSB20-37); mitigation is to update to 24.2.0 or later. This is evidenced acro...

CVE-2024-34134

Adobe Illustrator is affected by an out-of-bounds read vulnerability (CVE-2024-34134) in versions 28.5, 27.9.4 and earlier, enabling memory disclosure and bypass of ASLR. Exploitation requires the user to open a malicious file. Multiple connected sources (NVD/CVE records, APSB24-45 references, an...

CVE-2024-47451

Adobe Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-47451) that could lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a specially crafted file, with user interaction needed. Root...

CVE-2024-47453

CVE-2024-47453 affects Adobe Illustrator versions 28.7.1 and earlier, with an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires the victim to open a malicious file, and the issue is mitigated by the Adobe APSB24-87 updates (Illustrator 28.7...

CVE-2024-47457

Adobe Illustrator CVE-2024-47457 describes a NULL Pointer Dereference vulnerability in Illustrator

CVE-2024-34135

Adobe Illustrator is affected by CVE-2024-34135 and related issues in versions 28.5, 27.9.4 and earlier, due to an out-of-bounds read that could disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The published advisory APSB24-45 de...

CVE-2024-43758

CVE-2024-43758 affects Adobe Illustrator versions up to 28.6 and 27.9.5 and earlier, with a Use After Free condition that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The issue is part of a set of vulnerab...

CVE-2023-47075

Adobe Illustrator is affected by a Use-After-Free vulnerability in the JP2 parsing path that could allow arbitrary code execution when a victim opens a crafted file. Root cause: use-after-free in the JP2 parser. Impact: code execution in the context of the current user; exploitation requires user...

CVE-2024-47452

Adobe Illustrator 28.7.1 and earlier is affected by CVE-2024-47452, an out-of-bounds write that could execute arbitrary code in the context of the current user. Exploitation requires the user to open a crafted file. Affected versions should be updated to 28.7.2 or later per APSB24-87; advisories ...

CVE-2026-48334

CVE-2026-48334 in Adobe Illustrator: An Improper Input Validation (CWE-20) vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVE notes that the scope is changed. Based on the pro...

CVE-2025-49529

Adobe Illustrator is affected by CVE-2025-49529 (and related) in versions 28.7.6, 29.5.1 and earlier. The root cause is an Access of Uninitialized Pointer in the application, which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a...

CVE-2025-49530

Adobe Illustrator is affected by an out-of-bounds write vulnerability (CVE-2025-49530) in versions 28.7.6, 29.5.1 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Root cause described acr...

CVE-2025-49563

Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Affected versions: 28.7.8, 29.6.1 and earlier. Exploitation requires user interaction (victim must open a malicious file). Remediation: apply the securit...

CVE-2025-49564

Adobe Illustrator is affected by CVE-2025-49564: stack-based buffer overflow in versions 28.7.8, 29.6.1 and earlier that can lead to arbitrary code execution. Exploitation requires user interaction (opening a malicious file). The issue is documented across multiple sources (Adobe advisory APSB25-...

CVE-2025-49524

CVE-2025-49524 affects Adobe Illustrator; affected versions include 28.7.6, 29.5.1 and earlier. The issue is a NULL Pointer Dereference that can cause the application to crash (denial-of-service). Exploitation requires a user opening a malicious file. The vulnerability is documented with a remedi...

CVE-2025-49526

CVE-2025-49526 affects Adobe Illustrator versions 28.7.6, 29.5.1 and earlier. The issue is an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Multiple connected so...

CVE-2025-49528

CVE-2025-49528 affects Adobe Illustrator versions 28.7.6 and 29.5.1 and earlier, exposing a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm t...

CVE-2026-21288

Adobe Illustrator version 29.8.3, 30.0 and earlier is affected by a NULL Pointer Dereference that can crash the application and cause denial-of-service; exploitation requires a user to open a malicious file. Connected advisories confirm fixes have been released (APSB26-03) with updates to address...