CVE-2026-21288

Adobe Illustrator version 29.8.3, 30.0 and earlier is affected by a NULL Pointer Dereference that can crash the application and cause denial-of-service; exploitation requires a user to open a malicious file. Connected advisories confirm fixes have been released (APSB26-03) with updates to address...

CVE-2026-27267

CVE-2026-27267 — Illustrator stack-based buffer overflow . Affected: Adobe Illustrator versions 29.8.4, 30.1 and earlier. Description confirms a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (...

CVE-2025-49527

Adobe Illustrator (versions 28.7.6, 29.5.1 and earlier) is affected by a stack-based buffer overflow when handling malicious files, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Affected products/versions are docu...

CVE-2026-21280

Adobe Illustrator 29.8.3, 30.0 and earlier are affected by CVE-2026-21280, an Untrusted Search Path vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the attacker must entice the victim to open a malicious file, and...

CVE-2026-27271

CVE-2026-27271 is a heap-based buffer overflow in Adobe Illustrator affecting versions 29.8.4, 30.1 and earlier. The issue could allow arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Remediation: update to fixed versio...

CVE-2026-34661

CVE-2026-34661 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is an out-of-bounds write (CWE-787) vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Public exp...

CVE-2025-49567

Summary: CVE-2025-49567 affects Adobe Illustrator versions 28.7.8, 29.6.1 and earlier, due to a NULL Pointer Dereference that can cause application denial-of-service. Exploitation requires user interaction: a victim must open a malicious file, which crashes Illustrator. Multiple connected sources...

CVE-2025-49568

Adobe Illustrator is affected by CVE-2025-49568 (Use After Free) in Illustrator versions 28.7.8, 29.6.1 and earlier. The vulnerability involves memory mismanagement that could disclose sensitive memory and requires user interaction to exploit (victim opens a malicious file). A fix is available vi...

CVE-2025-49531

Adobe Illustrator is affected by CVE-2025-49531: an Integer Overflow or Wraparound in versions 28.7.6, 29.5.1 and earlier that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). The advisory APSB25-65 confirms u...

CVE-2025-49532

Adobe Illustrator is affected by CVE-2025-49532: an Integer Underflow (Wrap or Wraparound) that can lead to arbitrary code execution in the context of the current user. Affected versions include Illustrator 28.7.6, 29.5.1 and earlier; exploitation requires the user to open a malicious file. The i...

CVE-2025-49525

CVE-2025-49525 affects Adobe Illustrator versions 28.7.6, 29.5.1 and earlier, with an out-of-bounds read that could disclose sensitive memory. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include Windows and macOS builds as listed in public records; r...

CVE-2025-30313

Adobe Illustrator (Windows/macOS) is affected by an out-of-bounds read in versions 28.7.6, 29.5.1 and earlier, which could disclose sensitive memory. Exploitation requires a user to open a malicious file. Remediation: update to a version later than 28.7.6/29.5.1 (e.g., later than 28.7.8 and 29.6....

CVE-2025-54283

CVE-2025-54283 affects Adobe Illustrator versions 29.7, 28.7.9 and earlier. The issue is an out-of-bounds write in the renderer that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafted malicious fi...

CVE-2026-34618

CVE-2026-34618 affects Adobe Illustrator for Windows/macOS: versions 30.2, 29.8.5 and earlier are vulnerable to an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires user interaction via opening a malicious file. Public sour...

CVE-2026-34662

Adobe Illustrator CVE-2026-34662 affects versions 29.8.6, 30.3 and earlier. It is a NULL pointer dereference that could crash the application and cause a denial-of-service. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented with a CVSS v3.1 base s...

CVE-2026-21333

CVE-2026-21333 affects Adobe Illustrator of versions 29.8.4, 30.1 and earlier, with an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file (user interaction). Remediatio...

CVE-2026-34663

CVE-2026-34663 affects Adobe Illustrator up to version 30.3, including 29.8.6. It is an out-of-bounds read vulnerability in a component used by Illustrator that can lead to disclosure of sensitive memory. Exploitation requires user interaction (victim must open a malicious file); impact is limite...

CVE-2025-61820

Adobe Illustrator is affected by a Heap-based Buffer Overflow vulnerability (CVE-2025-61820) in versions 28.7.10 through 29.8.2 and earlier. The issue could allow arbitrary code execution in the context of the current user and requires user interaction (victim must open a malicious file). Affecte...

CVE-2025-54284

Adobe Illustrator CVE-2025-54284 describes an out-of-bounds write vulnerability affecting Illustrator versions 29.7, 28.7.9 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires a user to open a malicious file. Connected sources corroborate the issue an...

CVE-2025-61831

Summary: CVE-2025-61831 affects Adobe Illustrator versions 28.7.10 through 29.8.2 and earlier. The issue is an out-of-bounds write in Illustrator, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction, with the victim needing to open a malici...

CVE-2026-21362

CVE-2026-21362 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Multiple connected sources corroborate the same vuln...

CVE-2026-27268

Adobe Illustrator is affected by CVE-2026-27268: an Out-of-bounds Read that can lead to memory exposure in versions 29.8.4, 30.1 and earlier. Exploitation requires user interaction (victim opens a malicious file). Affected component is the Illustrator processing flow; root cause is an out-of-boun...

CVE-2026-27270

Illustrator 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that can expose memory. Exploitation requires a user to open a malicious file. Affected components: Illustrator processes reading crafted files; root cause: out-of-bounds read leading to memory exposure. Reme...

CVE-2026-27272

CVE-2026-27272 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier with an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Multiple connected advisories (Red Hat, NCSC...

CVE-2026-48335

CVE-2026-48335 affects Adobe Illustrator and describes an out-of-bounds write (CWE-787) vulnerability that could permit arbitrary code execution in the context of the current user. The flaw requires the victim to open a malicious file (user interaction) to trigger exploitation. The CVSS 3.1 base ...

CVE-2026-48337

CVE-2026-48337 affects Adobe Illustrator and is a vulnerability of type out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. The issue requires the user to open a malicious file, indicating a user interaction prerequisite and a local attack v...

CVE-2026-48275

CVE-2026-48275 : Illustrator is affected by an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file) and the issue involves a scope change . The CVSS da...

CVE-2026-48336

CVE-2026-48336 : Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a malicious file. The CVSS‑3.1 base score is 7.8 (HIGH) with LOCAL attack vector, ...