PT-2026-24501 · Adobe · Illustrator

Jann Horn

·

Published

2026-03-10

·

Updated

2026-03-11

·

CVE-2026-27267

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.4 and earlier Illustrator version 30.1 and earlier
Description Illustrator versions 29.8.4 and 30.1, and earlier are susceptible to a Stack-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of the current user. User interaction is required for exploitation, specifically, a user must open a malicious file.
Recommendations Update Illustrator to a version later than 29.8.4. Update Illustrator to a version later than 30.1.

Fix

Stack Overflow

Weakness Enumeration

Related Identifiers

BDU:2026-02877
CVE-2026-27267

Affected Products

Illustrator