CVE-2026-48334

CVE-2026-48334 in Adobe Illustrator: An Improper Input Validation (CWE-20) vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVE notes that the scope is changed. Based on the pro...

CVE-2026-34687

CVE-2026-34687 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The connected d...

CVE-2026-21280

Adobe Illustrator 29.8.3, 30.0 and earlier are affected by CVE-2026-21280, an Untrusted Search Path vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the attacker must entice the victim to open a malicious file, and...

CVE-2026-27267

CVE-2026-27267 — Illustrator stack-based buffer overflow . Affected: Adobe Illustrator versions 29.8.4, 30.1 and earlier. Description confirms a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (...

CVE-2026-27271

CVE-2026-27271 is a heap-based buffer overflow in Adobe Illustrator affecting versions 29.8.4, 30.1 and earlier. The issue could allow arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Remediation: update to fixed versio...

CVE-2026-21288

Adobe Illustrator version 29.8.3, 30.0 and earlier is affected by a NULL Pointer Dereference that can crash the application and cause denial-of-service; exploitation requires a user to open a malicious file. Connected advisories confirm fixes have been released (APSB26-03) with updates to address...

CVE-2026-34661

CVE-2026-34661 affects Adobe Illustrator versions 29.8.6, 30.3 and earlier. It is an out-of-bounds write (CWE-787) vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Public exp...

CVE-2026-21333

CVE-2026-21333 affects Adobe Illustrator of versions 29.8.4, 30.1 and earlier, with an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file (user interaction). Remediatio...

CVE-2026-34618

CVE-2026-34618 affects Adobe Illustrator for Windows/macOS: versions 30.2, 29.8.5 and earlier are vulnerable to an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires user interaction via opening a malicious file. Public sour...

CVE-2026-34662

Adobe Illustrator CVE-2026-34662 affects versions 29.8.6, 30.3 and earlier. It is a NULL pointer dereference that could crash the application and cause a denial-of-service. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented with a CVSS v3.1 base s...

CVE-2026-48337

CVE-2026-48337 affects Adobe Illustrator and is a vulnerability of type out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. The issue requires the user to open a malicious file, indicating a user interaction prerequisite and a local attack v...

CVE-2026-21362

CVE-2026-21362 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Multiple connected sources corroborate the same vuln...

CVE-2026-27270

Illustrator 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that can expose memory. Exploitation requires a user to open a malicious file. Affected components: Illustrator processes reading crafted files; root cause: out-of-bounds read leading to memory exposure. Reme...

CVE-2026-27268

Adobe Illustrator is affected by CVE-2026-27268: an Out-of-bounds Read that can lead to memory exposure in versions 29.8.4, 30.1 and earlier. Exploitation requires user interaction (victim opens a malicious file). Affected component is the Illustrator processing flow; root cause is an out-of-boun...

CVE-2026-34663

CVE-2026-34663 affects Adobe Illustrator up to version 30.3, including 29.8.6. It is an out-of-bounds read vulnerability in a component used by Illustrator that can lead to disclosure of sensitive memory. Exploitation requires user interaction (victim must open a malicious file); impact is limite...

CVE-2026-48335

CVE-2026-48335 affects Adobe Illustrator and describes an out-of-bounds write (CWE-787) vulnerability that could permit arbitrary code execution in the context of the current user. The flaw requires the victim to open a malicious file (user interaction) to trigger exploitation. The CVSS 3.1 base ...

CVE-2026-48275

CVE-2026-48275 : Illustrator is affected by an Untrusted Search Path (CWE-426) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file) and the issue involves a scope change . The CVSS da...

CVE-2026-27272

CVE-2026-27272 affects Adobe Illustrator versions 29.8.4, 30.1 and earlier with an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Multiple connected advisories (Red Hat, NCSC...

CVE-2026-48336

CVE-2026-48336 : Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a malicious file. The CVSS‑3.1 base score is 7.8 (HIGH) with LOCAL attack vector, ...