Skip to content
OpenAdvisories

Product · Adobe

Illustrator Desktop 2026

23 known vulnerabilities.

Illustrator Desktop 2026 at a glance

Last 12 months
23
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 2 vulnerabilities February 2026: 0 vulnerabilities March 2026: 7 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 4 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 5 vulnerabilities, 1 critical August 2026: 1 vulnerability September 2026: 3 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202630
Aug 202610
Jul 202651
Jun 202600
May 202640
Apr 202610
Mar 202670
Feb 202600
Jan 202620
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

23 results · Feed

  • High 8.6

    Illustrator | Improper Input Validation (CWE-20)

    Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires…

  • High 8.6

    Illustrator | Incorrect Authorization (CWE-863)

    Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires u…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • Medium 5.5

    Illustrator | Out-of-bounds Read (CWE-125)

    Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a v…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • Critical 9.3

    Illustrator | Improper Input Validation (CWE-20)

    Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this i…

  • High 8.6

    Illustrator | Untrusted Search Path (CWE-426)

    Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is chan…

  • Medium 5.5

    Illustrator | NULL Pointer Dereference (CWE-476)

    Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service…

  • High 7.8

    Illustrator | Heap-based Buffer Overflow (CWE-122)

    Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu…

  • Medium 5.5

    Illustrator | Out-of-bounds Read (CWE-125)

    Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue re…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator versions 30.2, 29.8.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope…

  • Medium 5.5

    Illustrator | Out-of-bounds Read (CWE-125)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue re…

  • High 7.8

    Illustrator | Heap-based Buffer Overflow (CWE-122)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu…

  • Medium 5.5

    Illustrator | Out-of-bounds Read (CWE-125)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue re…

  • High 8.6

    Illustrator | Untrusted Search Path (CWE-426)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope…

  • High 7.8

    Illustrator | Stack-based Buffer Overflow (CWE-121)

    Illustrator versions 29.8.4, 30.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim m…

  • High 8.6

    Illustrator | Untrusted Search Path (CWE-426)

    Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as p…

  • Medium 5.5

    Illustrator | NULL Pointer Dereference (CWE-476)

    Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exp…