Adobe Illustrator vulnerabilities

CVE-2022-38409 [MEDIUM] CWE-125 CVE-2022-38409: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bou Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious fil

CVE-2022-38410 [MEDIUM] CWE-125 CVE-2022-38410: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bou Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious fil

CVE-2023-25862 [MEDIUM] CWE-125 CVE-2023-25862: Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds r Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-30313 [MEDIUM] CWE-125 CVE-2025-30313: Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-49525 [MEDIUM] CWE-125 CVE-2025-49525: Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21288 [MEDIUM] CWE-476 CVE-2026-21288: Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerabili Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious fil

CVE-2024-43759 [MEDIUM] CWE-476 CVE-2024-43759: Illustrator versions 28.6, 27.9.5 and earlier are affected by a NULL Pointer Dereference vulnerabili Illustrator versions 28.6, 27.9.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a DoS condition. Exploitation of this issue requires user interaction in that a victim must open a malici

CVE-2024-34118 [MEDIUM] CWE-20 CVE-2024-34118: Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerabi Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of this issue requires user interaction in that a victim mu

CVE-2025-49567 [MEDIUM] CWE-476 CVE-2025-49567: Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerabi Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious

CVE-2024-34137 [MEDIUM] CWE-476 CVE-2024-34137: Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerabili Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires user interaction in that a victim must open a malici

CVE-2026-34662 [MEDIUM] CWE-476 CVE-2026-34662: Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerabili Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open

CVE-2024-47457 [MEDIUM] CWE-476 CVE-2024-47457: Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability tha Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a mali

CVE-2025-27170 [MEDIUM] CWE-476 CVE-2025-27170: Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerabi Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must ope

CVE-2025-49524 [MEDIUM] CWE-476 CVE-2025-49524: Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a NULL Pointer Dereference vulnerabi Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious

CVE-2006-0525 [MEDIUM] CWE-264 CVE-2006-0525: Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.

CVE-2024-34138 [MEDIUM] CWE-476 CVE-2024-34138: Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerabili Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this issue requires user interaction in that a victim must

CVE-2024-34136 [MEDIUM] CWE-476 CVE-2024-34136: Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerabili Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this issue requires user interaction in that a victim must

CVE-2021-36010 [LOW] CWE-125 CVE-2021-36010: Adobe Illustrator version 25.2.3 (and earlier) is affected by an out-of-bounds read vulnerability th Adobe Illustrator version 25.2.3 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.