Adobe Illustrator
Recent Adobe Illustrator Security Advisories
| Advisory | Title | Published |
|---|---|---|
| APSB23-19 | Security Updates Available for Adobe Illustrator | APSB23-19 | March 15, 2023 |
| APSB22-60 | Security Updates Available for Adobe Illustrator | APSB22-60 | December 15, 2022 |
| APSB22-41 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-41 | March 16, 2022 |
| APSB22-26 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-26 | March 16, 2022 |
| APSB22-55 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-55 | March 16, 2022 |
| APSB22-56 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-56 | March 16, 2022 |
| APSB22-15 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-15 | March 9, 2022 |
| APSB22-07 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-07 | February 8, 2022 |
| APSB22-02 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB22-02 | January 11, 2022 |
| APSB21-98 | Security Updates Available for Adobe Illustrator | APSB21-12 APSB21-98 | October 26, 2021 |
By the Year
In 2023 there have been 4 vulnerabilities in Adobe Illustrator with an average score of 7.2 out of ten. Illustrator did not have any published security vulnerabilities last year. That is, 4 more vulnerabilities have already been reported in 2023 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2023 | 4 | 7.23 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Illustrator vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Adobe Illustrator Security Vulnerabilities
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability
CVE-2023-26426
7.8 - High
- March 22, 2023
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Dangling pointer
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability
CVE-2023-25862
5.5 - Medium
- March 22, 2023
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Out-of-bounds Read
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability
CVE-2023-25861
7.8 - High
- March 22, 2023
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability
CVE-2023-25860
7.8 - High
- March 22, 2023
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Adobe Illustrator or by Adobe? Click the Watch button to subscribe.
