PT-2026-24502 · Adobe · Illustrator

Michele Damico · Published 2026-03-10 · Updated 2026-03-11 · CVE-2026-27268

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.4 and earlier Illustrator version 30.1

Description The software is susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to gain access to sensitive information stored in memory. Successful exploitation requires user interaction, specifically the opening of a malicious file.

Recommendations Update Illustrator to a version later than 29.8.4. Update Illustrator to a version later than 30.1.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02884

CVE-2026-27268

Affected Products

Illustrator

References · 6

• https://helpx.adobe.com/security/products/illustrator/apsb26-18.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27268 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27268 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02884 · Security Note
• https://t.me/CVEtracker/47055 · Telegram Post
• https://twitter.com/CVEnew/status/2031597318710194384 · Twitter Post