CVE-2025-49530

Adobe Illustrator is affected by an out-of-bounds write vulnerability (CVE-2025-49530) in versions 28.7.6, 29.5.1 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Root cause described acr...

CVE-2026-21288

Adobe Illustrator version 29.8.3, 30.0 and earlier is affected by a NULL Pointer Dereference that can crash the application and cause denial-of-service; exploitation requires a user to open a malicious file. Connected advisories confirm fixes have been released (APSB26-03) with updates to address...

CVE-2026-27267

CVE-2026-27267 — Illustrator stack-based buffer overflow . Affected: Adobe Illustrator versions 29.8.4, 30.1 and earlier. Description confirms a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (...

CVE-2026-27271

CVE-2026-27271 is a heap-based buffer overflow in Adobe Illustrator affecting versions 29.8.4, 30.1 and earlier. The issue could allow arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Remediation: update to fixed versio...

CVE-2026-34687

CVE-2026-34687 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The connected d...

CVE-2025-49524

CVE-2025-49524 affects Adobe Illustrator; affected versions include 28.7.6, 29.5.1 and earlier. The issue is a NULL Pointer Dereference that can cause the application to crash (denial-of-service). Exploitation requires a user opening a malicious file. The vulnerability is documented with a remedi...

CVE-2026-34618

CVE-2026-34618 affects Adobe Illustrator for Windows/macOS: versions 30.2, 29.8.5 and earlier are vulnerable to an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires user interaction via opening a malicious file. Public sour...

CVE-2025-54283

CVE-2025-54283 affects Adobe Illustrator versions 29.7, 28.7.9 and earlier. The issue is an out-of-bounds write in the renderer that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafted malicious fi...

CVE-2026-34661

CVE-2026-34661 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is an out-of-bounds write (CWE-787) vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Public exp...

CVE-2025-49529

Adobe Illustrator is affected by CVE-2025-49529 (and related) in versions 28.7.6, 29.5.1 and earlier. The root cause is an Access of Uninitialized Pointer in the application, which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a...

CVE-2025-49568

Adobe Illustrator is affected by CVE-2025-49568 (Use After Free) in Illustrator versions 28.7.8, 29.6.1 and earlier. The vulnerability involves memory mismanagement that could disclose sensitive memory and requires user interaction to exploit (victim opens a malicious file). A fix is available vi...

CVE-2025-49532

Adobe Illustrator is affected by CVE-2025-49532: an Integer Underflow (Wrap or Wraparound) that can lead to arbitrary code execution in the context of the current user. Affected versions include Illustrator 28.7.6, 29.5.1 and earlier; exploitation requires the user to open a malicious file. The i...

CVE-2025-49567

Summary: CVE-2025-49567 affects Adobe Illustrator versions 28.7.8, 29.6.1 and earlier, due to a NULL Pointer Dereference that can cause application denial-of-service. Exploitation requires user interaction: a victim must open a malicious file, which crashes Illustrator. Multiple connected sources...

CVE-2026-48336

CVE-2026-48336 : Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a malicious file. The CVSS‑3.1 base score is 7.8 (HIGH) with LOCAL attack vector, ...

CVE-2025-49526

CVE-2025-49526 affects Adobe Illustrator versions 28.7.6, 29.5.1 and earlier. The issue is an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Multiple connected so...

CVE-2025-49527

Adobe Illustrator (versions 28.7.6, 29.5.1 and earlier) is affected by a stack-based buffer overflow when handling malicious files, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Affected products/versions are docu...

CVE-2025-49528

CVE-2025-49528 affects Adobe Illustrator versions 28.7.6 and 29.5.1 and earlier, exposing a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm t...

CVE-2026-21362

CVE-2026-21362 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Multiple connected sources corroborate the same vuln...

CVE-2026-34662

Adobe Illustrator CVE-2026-34662 affects versions 29.8.6, 30.3 and earlier. It is a NULL pointer dereference that could crash the application and cause a denial-of-service. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented with a CVSS v3.1 base s...

CVE-2025-30313

Adobe Illustrator (Windows/macOS) is affected by an out-of-bounds read in versions 28.7.6, 29.5.1 and earlier, which could disclose sensitive memory. Exploitation requires a user to open a malicious file. Remediation: update to a version later than 28.7.6/29.5.1 (e.g., later than 28.7.8 and 29.6....

CVE-2025-49525

CVE-2025-49525 affects Adobe Illustrator versions 28.7.6, 29.5.1 and earlier, with an out-of-bounds read that could disclose sensitive memory. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include Windows and macOS builds as listed in public records; r...

CVE-2025-49531

Adobe Illustrator is affected by CVE-2025-49531: an Integer Overflow or Wraparound in versions 28.7.6, 29.5.1 and earlier that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The advisory APSB25-65 confirms u...

CVE-2026-34663

CVE-2026-34663 affects Adobe Illustrator up to version 30.3, including 29.8.6. It is an out-of-bounds read vulnerability in a component used by Illustrator that can lead to disclosure of sensitive memory. Exploitation requires user interaction (victim must open a malicious file); impact is limite...

CVE-2026-27270

Illustrator 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that can expose memory. Exploitation requires a user to open a malicious file. Affected components: Illustrator processes reading crafted files; root cause: out-of-bounds read leading to memory exposure. Reme...

CVE-2025-61831

Summary: CVE-2025-61831 affects Adobe Illustrator versions 28.7.10 through 29.8.2 and earlier. The issue is an out-of-bounds write in Illustrator, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction, with the victim needing to open a malici...

CVE-2025-54284

Adobe Illustrator CVE-2025-54284 describes an out-of-bounds write vulnerability affecting Illustrator versions 29.7, 28.7.9 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires a user to open a malicious file. Connected sources corroborate the issue an...

CVE-2026-27268

Adobe Illustrator is affected by CVE-2026-27268: an Out-of-bounds Read that can lead to memory exposure in versions 29.8.4, 30.1 and earlier. Exploitation requires user interaction (victim opens a malicious file). Affected component is the Illustrator processing flow; root cause is an out-of-boun...

CVE-2025-61820

Adobe Illustrator is affected by a Heap-based Buffer Overflow vulnerability (CVE-2025-61820) in versions 28.7.10 through 29.8.2 and earlier. The issue could allow arbitrary code execution in the context of the current user and requires user interaction (victim must open a malicious file). Affecte...

CVE-2026-75990

Adobe Illustrator is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 8.6 (HIGH) with a changed scope, ...

CVE-2026-71441

Adobe Illustrator is affected by an out-of-bounds read vulnerability (CWE-125) that can lead to disclosure of sensitive memory . An attacker can leverage this by getting a victim to open a malicious file , making user interaction the primary precondition. The CVSS 3.1 score is 5.5 (MEDIUM) with a...

CVE-2026-75991

Adobe Illustrator is affected by an Improper Input Validation (CWE-20) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file . The CVSS 3.1 score is 8.6 (HIGH) , with a local attack ...

CVE-2026-75992

Adobe Illustrator is affected by an out-of-bounds write (CWE-787) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file. The assigned CVSS v3.1 score is 7.8 (HIGH) , with a local a...