CVE-2019-7962

CWE-427CWE-4263 documents3 sources
Severity
7.8HIGH
EPSS
0.3%
top 46.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 14
Latest updateMay 24

Description

Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

CVEListV5adobe/adobe_illustrator_cc23.1 and earlier versions

🔴Vulnerability Details

2
GHSA
GHSA-qf49-whr3-4c4f: Adobe Illustrator CC versions 232022-05-24
CVEList
CVE-2019-7962: Adobe Illustrator CC versions 232019-11-14