CVE-2025-49524

CVE-2025-49524 affects Adobe Illustrator; affected versions include 28.7.6, 29.5.1 and earlier. The issue is a NULL Pointer Dereference that can cause the application to crash (denial-of-service). Exploitation requires a user opening a malicious file. The vulnerability is documented with a remedi...

CVE-2026-27267

CVE-2026-27267 — Illustrator stack-based buffer overflow . Affected: Adobe Illustrator versions 29.8.4, 30.1 and earlier. Description confirms a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (...

CVE-2026-48335

CVE-2026-48335 affects Adobe Illustrator and describes an out-of-bounds write (CWE-787) vulnerability that could permit arbitrary code execution in the context of the current user. The flaw requires the victim to open a malicious file (user interaction) to trigger exploitation. The CVSS 3.1 base ...

CVE-2025-49564

Adobe Illustrator is affected by CVE-2025-49564: stack-based buffer overflow in versions 28.7.8, 29.6.1 and earlier that can lead to arbitrary code execution. Exploitation requires user interaction (opening a malicious file). The issue is documented across multiple sources (Adobe advisory APSB25-...

CVE-2025-49529

Adobe Illustrator is affected by CVE-2025-49529 (and related) in versions 28.7.6, 29.5.1 and earlier. The root cause is an Access of Uninitialized Pointer in the application, which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a...

CVE-2025-49568

Adobe Illustrator is affected by CVE-2025-49568 (Use After Free) in Illustrator versions 28.7.8, 29.6.1 and earlier. The vulnerability involves memory mismanagement that could disclose sensitive memory and requires user interaction to exploit (victim opens a malicious file). A fix is available vi...

CVE-2026-48275

CVE-2026-48275 : Illustrator is affected by an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file) and the issue involves a scope change . The CVSS da...

CVE-2025-49526

CVE-2025-49526 affects Adobe Illustrator versions 28.7.6, 29.5.1 and earlier. The issue is an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Multiple connected so...

CVE-2025-49528

CVE-2025-49528 affects Adobe Illustrator versions 28.7.6 and 29.5.1 and earlier, exposing a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm t...

CVE-2026-34618

CVE-2026-34618 affects Adobe Illustrator for Windows/macOS: versions 30.2, 29.8.5 and earlier are vulnerable to an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires user interaction via opening a malicious file. Public sour...

CVE-2026-34661

CVE-2026-34661 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is an out-of-bounds write (CWE-787) vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Public exp...

CVE-2025-49527

Adobe Illustrator (versions 28.7.6, 29.5.1 and earlier) is affected by a stack-based buffer overflow when handling malicious files, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Affected products/versions are docu...

CVE-2025-49532

Adobe Illustrator is affected by CVE-2025-49532: an Integer Underflow (Wrap or Wraparound) that can lead to arbitrary code execution in the context of the current user. Affected versions include Illustrator 28.7.6, 29.5.1 and earlier; exploitation requires the user to open a malicious file. The i...

CVE-2025-54283

CVE-2025-54283 affects Adobe Illustrator versions 29.7, 28.7.9 and earlier. The issue is an out-of-bounds write in the renderer that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafted malicious fi...

CVE-2025-49525

CVE-2025-49525 affects Adobe Illustrator versions 28.7.6, 29.5.1 and earlier, with an out-of-bounds read that could disclose sensitive memory. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include Windows and macOS builds as listed in public records; r...

CVE-2025-49531

Adobe Illustrator is affected by CVE-2025-49531: an Integer Overflow or Wraparound in versions 28.7.6, 29.5.1 and earlier that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The advisory APSB25-65 confirms u...

CVE-2026-34662

Adobe Illustrator CVE-2026-34662 affects versions 29.8.6, 30.3 and earlier. It is a NULL pointer dereference that could crash the application and cause a denial-of-service. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented with a CVSS v3.1 base s...

CVE-2025-49567

Summary: CVE-2025-49567 affects Adobe Illustrator versions 28.7.8, 29.6.1 and earlier, due to a NULL Pointer Dereference that can cause application denial-of-service. Exploitation requires user interaction: a victim must open a malicious file, which crashes Illustrator. Multiple connected sources...

CVE-2026-34663

CVE-2026-34663 affects Adobe Illustrator up to version 30.3, including 29.8.6. It is an out-of-bounds read vulnerability in a component used by Illustrator that can lead to disclosure of sensitive memory. Exploitation requires user interaction (victim must open a malicious file); impact is limite...

CVE-2025-30313

Adobe Illustrator (Windows/macOS) is affected by an out-of-bounds read in versions 28.7.6, 29.5.1 and earlier, which could disclose sensitive memory. Exploitation requires a user to open a malicious file. Remediation: update to a version later than 28.7.6/29.5.1 (e.g., later than 28.7.8 and 29.6....

CVE-2026-21362

CVE-2026-21362 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Multiple connected sources corroborate the same vuln...

CVE-2026-48336

CVE-2026-48336 : Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a malicious file. The CVSS‑3.1 base score is 7.8 (HIGH) with LOCAL attack vector, ...

CVE-2025-61831

Summary: CVE-2025-61831 affects Adobe Illustrator versions 28.7.10 through 29.8.2 and earlier. The issue is an out-of-bounds write in Illustrator, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction, with the victim needing to open a malici...

CVE-2026-27270

Illustrator 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that can expose memory. Exploitation requires a user to open a malicious file. Affected components: Illustrator processes reading crafted files; root cause: out-of-bounds read leading to memory exposure. Reme...

CVE-2026-27268

Adobe Illustrator is affected by CVE-2026-27268: an Out-of-bounds Read that can lead to memory exposure in versions 29.8.4, 30.1 and earlier. Exploitation requires user interaction (victim opens a malicious file). Affected component is the Illustrator processing flow; root cause is an out-of-boun...

CVE-2026-27272

CVE-2026-27272 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier with an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Multiple connected advisories (Red Hat, NCSC...

CVE-2025-54284

Adobe Illustrator CVE-2025-54284 describes an out-of-bounds write vulnerability affecting Illustrator versions 29.7, 28.7.9 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires a user to open a malicious file. Connected sources corroborate the issue an...

CVE-2025-61820

Adobe Illustrator is affected by a Heap-based Buffer Overflow vulnerability (CVE-2025-61820) in versions 28.7.10 through 29.8.2 and earlier. The issue could allow arbitrary code execution in the context of the current user and requires user interaction (victim must open a malicious file). Affecte...