Adobe Illustrator vulnerabilities
178 known vulnerabilities affecting adobe/illustrator.
Total CVEs
178
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL14HIGH105MEDIUM58LOW1
Vulnerabilities
Page 8 of 9
CVE-2024-20793P4MEDIUMCVSS 5.5fixed in 27.9.4≥ 28.0, < 28.5+1 more2024-05-16
CVE-2024-20793 [MEDIUM] CWE-125 CVE-2024-20793: Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability th
Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-20798P4MEDIUMCVSS 5.5fixed in 27.9.3≥ 28.0, < 28.4+1 more2024-04-11
CVE-2024-20798 [MEDIUM] CWE-125 CVE-2024-20798: Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability th
Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2025-24449P4MEDIUMCVSS 5.5≥ 28.0, < 28.7.5≥ 29.0, < 29.3+1 more2025-03-11
CVE-2025-24449 [MEDIUM] CWE-125 CVE-2025-24449: Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2025-24448P4MEDIUMCVSS 5.5≥ 28.0, < 28.7.5≥ 29.0, < 29.3+1 more2025-03-11
CVE-2025-24448 [MEDIUM] CWE-125 CVE-2025-24448: Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-47453P4MEDIUMCVSS 5.5fixed in 28.7.2≤ 28.7.12024-11-12
CVE-2024-47453 [MEDIUM] CWE-125 CVE-2024-47453: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that cou
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-47455P4MEDIUMCVSS 5.5fixed in 28.7.2≤ 28.7.12024-11-12
CVE-2024-47455 [MEDIUM] CWE-125 CVE-2024-47455: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that cou
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-47454P4MEDIUMCVSS 5.5fixed in 28.7.2≤ 28.7.12024-11-12
CVE-2024-47454 [MEDIUM] CWE-125 CVE-2024-47454: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that cou
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-47456P4MEDIUMCVSS 5.5fixed in 28.7.2≤ 28.7.12024-11-12
CVE-2024-47456 [MEDIUM] CWE-125 CVE-2024-47456: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that cou
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-34663P4MEDIUMCVSS 5.5≥ 29.0, < 29.8.7≥ 30.0, < 30.4+1 more2026-05-12
CVE-2026-34663 [MEDIUM] CWE-125 CVE-2026-34663: Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability th
Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-27268P4MEDIUMCVSS 5.5≥ 29.0, < 29.8.5≥ 30.0, < 30.2+1 more2026-03-10
CVE-2026-27268 [MEDIUM] CWE-125 CVE-2026-27268: Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability th
Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-27270P4MEDIUMCVSS 5.5≥ 29.0, < 29.8.5≥ 30.0, < 30.2+1 more2026-03-10
CVE-2026-27270 [MEDIUM] CWE-125 CVE-2026-27270: Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability th
Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-23198P4MEDIUMCVSS 5.5≤ 25.4.3≥ 26.0.0, ≤ 26.0.2+1 more2022-02-16
CVE-2022-23198 [MEDIUM] CWE-476 CVE-2022-23198: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null poin
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope
nvd
CVE-2022-23189P4MEDIUMCVSS 5.5≤ 25.4.3≥ 26.0.0, ≤ 26.0.2+1 more2022-02-16
CVE-2022-23189 [MEDIUM] CWE-476 CVE-2022-23189: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null poin
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope
nvd
CVE-2022-23199P4MEDIUMCVSS 5.5≤ 25.4.3≥ 26.0.0, ≤ 26.0.2+1 more2022-02-16
CVE-2022-23199 [MEDIUM] CWE-476 CVE-2022-23199: Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null poin
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope
nvd
CVE-2022-44502P4MEDIUMCVSS 5.5≤ 26.5.1v27.0+1 more2022-12-16
CVE-2022-44502 [MEDIUM] CWE-125 CVE-2022-44502: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bo
Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious fi
nvd
CVE-2022-44498P4MEDIUMCVSS 5.5≤ 26.5.1v27.0+1 more2022-12-16
CVE-2022-44498 [MEDIUM] CWE-125 CVE-2022-44498: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bo
Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious fi
nvd
CVE-2022-44499P4MEDIUMCVSS 5.5≤ 26.5.1v27.0+1 more2022-12-16
CVE-2022-44499 [MEDIUM] CWE-125 CVE-2022-44499: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bo
Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious fi
nvd
CVE-2022-44500P4MEDIUMCVSS 5.5≤ 26.5.1v27.0+1 more2022-12-16
CVE-2022-44500 [MEDIUM] CWE-125 CVE-2022-44500: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bo
Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious fi
nvd
CVE-2022-34262P4MEDIUMCVSS 5.5≤ 25.4.6≥ 26.0, ≤ 26.3.1+1 more2022-08-11
CVE-2022-34262 [MEDIUM] CWE-125 CVE-2022-34262: Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-b
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious f
nvd
CVE-2022-34261P4MEDIUMCVSS 5.5≤ 25.4.6≥ 26.0, ≤ 26.3.1+1 more2022-08-11
CVE-2022-34261 [MEDIUM] CWE-125 CVE-2022-34261: Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-b
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious f
nvd