Product by Adobe
Illustrator Desktop 2025
23 known vulnerabilities in Illustrator Desktop 2025 (Adobe), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-48334 | Illustrator | Improper Input Validation (CWE-20) | 9.3 | |
| High | CVE-2026-75991 | Illustrator | Improper Input Validation (CWE-20) | 8.6 | |
| High | CVE-2026-75990 | Illustrator | Incorrect Authorization (CWE-863) | 8.6 | |
| High | CVE-2026-75992 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| High | CVE-2026-48275 | Illustrator | Untrusted Search Path (CWE-426) | 8.6 | |
| High | CVE-2026-48335 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| High | CVE-2026-48337 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| High | CVE-2026-48336 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| High | CVE-2026-34687 | Illustrator | Heap-based Buffer Overflow (CWE-122) | 7.8 | |
| High | CVE-2026-27271 | Illustrator | Heap-based Buffer Overflow (CWE-122) | 7.8 | |
| High | CVE-2026-27267 | Illustrator | Stack-based Buffer Overflow (CWE-121) | 7.8 | |
| High | CVE-2026-21280 | Illustrator | Untrusted Search Path (CWE-426) | 8.6 | |
| High | CVE-2026-34661 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| High | CVE-2026-21333 | Illustrator | Untrusted Search Path (CWE-426) | 8.6 | |
| High | CVE-2026-34618 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| High | CVE-2026-27272 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| Medium | CVE-2026-71441 | Illustrator | Out-of-bounds Read (CWE-125) | 5.5 | |
| High | CVE-2026-21362 | Illustrator | Out-of-bounds Write (CWE-787) | 7.8 | |
| Medium | CVE-2026-34663 | Illustrator | Out-of-bounds Read (CWE-125) | 5.5 | |
| Medium | CVE-2026-34662 | Illustrator | NULL Pointer Dereference (CWE-476) | 5.5 | |
| Medium | CVE-2026-27268 | Illustrator | Out-of-bounds Read (CWE-125) | 5.5 | |
| Medium | CVE-2026-27270 | Illustrator | Out-of-bounds Read (CWE-125) | 5.5 | |
| Medium | CVE-2026-21288 | Illustrator | NULL Pointer Dereference (CWE-476) | 5.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,