CVE-2026-48334

CRITICAL

Adobe Illustrator Desktop 2026 - Illustrator | Improper Input Validation (CWE-20)

Title source: rule
STIX 2.1

Description

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

References (1)

Core 1
Core References

Scores

CVSS v3 9.3
EPSS 0.0040
EPSS Percentile 32.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-20
Status published
Products (5)
adobe/illustrator 29.0 - 29.8.9
Adobe/Illustrator Desktop 2025 < 29.8.7
Adobe/Illustrator Desktop 2025 29.8.9
Adobe/Illustrator Desktop 2026 < 30.5
Adobe/Illustrator Desktop 2026 30.6
Published Jul 14, 2026
Tracked Since Jul 15, 2026