Adobe Illustrator vulnerabilities

169 known vulnerabilities affecting adobe/illustrator.

Total CVEs
169
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL13HIGH99MEDIUM56LOW1

Vulnerabilities

Page 8 of 9
CVE-2020-24412HIGHCVSS 7.8≤ 24.1.2≥ unspecified, ≤ 24.1.22020-10-20
CVE-2020-24412 [HIGH] CWE-788 CVE-2020-24412: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
cvelistv5nvd
CVE-2020-24413HIGHCVSS 7.8≤ 24.1.2≥ unspecified, ≤ 24.1.22020-10-20
CVE-2020-24413 [HIGH] CWE-788 CVE-2020-24413: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
cvelistv5nvd
CVE-2020-24410HIGHCVSS 7.8≤ 24.2≥ unspecified, ≤ 24.22020-10-20
CVE-2020-24410 [HIGH] CWE-125 CVE-2020-24410: Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read past the end of an allocated memory structure, potentially resulting in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
cvelistv5nvd
CVE-2020-24409HIGHCVSS 7.8≤ 24.2≥ unspecified, ≤ 24.22020-10-20
CVE-2020-24409 [HIGH] CWE-125 CVE-2020-24409: Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read past the end of an allocated memory structure, potentially resulting in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
cvelistv5nvd
CVE-2020-24414HIGHCVSS 7.8≤ 24.2≥ unspecified, ≤ 24.1.22020-10-20
CVE-2020-24414 [HIGH] CWE-788 CVE-2020-24414: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
cvelistv5nvd
CVE-2020-9572HIGHCVSS 7.8≤ 24.0.22020-06-26
CVE-2020-9572 [HIGH] CWE-787 CVE-2020-9572: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2020-9573HIGHCVSS 7.8≤ 24.0.22020-06-26
CVE-2020-9573 [HIGH] CWE-787 CVE-2020-9573: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2020-9571HIGHCVSS 7.8≤ 24.0.22020-06-26
CVE-2020-9571 [HIGH] CWE-787 CVE-2020-9571: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2020-9570HIGHCVSS 7.8≤ 24.0.22020-06-26
CVE-2020-9570 [HIGH] CWE-787 CVE-2020-9570: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2020-9574HIGHCVSS 7.8≤ 24.0.22020-06-26
CVE-2020-9574 [HIGH] CWE-787 CVE-2020-9574: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2020-9575HIGHCVSS 7.8≤ 24.1.22020-06-25
CVE-2020-9575 [HIGH] CWE-787 CVE-2020-9575: Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2020-9642HIGHCVSS 7.8≤ 24.1.22020-06-25
CVE-2020-9642 [HIGH] CWE-119 CVE-2020-9642: Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. Successful exploit Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2020-9640HIGHCVSS 7.8≤ 24.1.22020-06-25
CVE-2020-9640 [HIGH] CWE-787 CVE-2020-9640: Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2020-9641HIGHCVSS 7.8≤ 24.1.22020-06-25
CVE-2020-9641 [HIGH] CWE-787 CVE-2020-9641: Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2020-9639HIGHCVSS 7.8≤ 24.1.22020-06-25
CVE-2020-9639 [HIGH] CWE-787 CVE-2020-9639: Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exp Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2014-0513CRITICALCVSS 10.0≤ 16.0.4v16.0.1+4 more2014-05-14
CVE-2014-0513 [CRITICAL] CWE-119 CVE-2014-0513: Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows r Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2012-2042CRITICALCVSS 10.0v7.0v8.0+11 more2012-05-24
CVE-2012-2042 [CRITICAL] CVE-2012-2042: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.
nvd
CVE-2012-2024CRITICALCVSS 10.0v7.0v8.0+11 more2012-05-09
CVE-2012-2024 [CRITICAL] CVE-2012-2024: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026.
nvd
CVE-2012-2026CRITICALCVSS 10.0v7.0v8.0+11 more2012-05-09
CVE-2012-2026 [CRITICAL] CVE-2012-2026: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2025.
nvd
CVE-2012-0780CRITICALCVSS 10.0PoCv7.0v8.0+11 more2012-05-09
CVE-2012-0780 [CRITICAL] CWE-119 CVE-2012-0780: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.
nvd