Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen.
Product
Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.
Vulnerabilities 4
-
High 8.6
Illustrator | Incorrect Authorization (CWE-863)
Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires u…
-
High 8.6
Illustrator | Improper Input Validation (CWE-20)
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires…
-
High 8.2
Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94)
Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary…
-
High 7.8
Illustrator | Out-of-bounds Write (CWE-787)
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Revision history
-
#1
Initiale Fassung
References
-
Adobe Security Bulletin apsb26-132 vom 2026-09-08
https://helpx.adobe.com/security/products/animate/apsb26-132.html
-
Adobe Security Bulletin apsb26-131 vom 2026-09-08
https://helpx.adobe.com/security/products/illustrator/apsb26-131.html