Untrusted Search Path Vulnerability in Adobe Illustrator
CVE-2025-27167
What is CVE-2025-27167?
Adobe Illustrator is susceptible to an untrusted search path vulnerability that could be exploited by attackers to execute unauthorized programs, gain access to sensitive data files, or tamper with application settings. This flaw arises when the application relies on a defined search path to locate essential resources. An attacker may manipulate this search path, directing it towards malicious software, which consequently gets executed by Illustrator. The scope of this issue encompasses any critical resource that the application is designed to trust, posing a significant threat to users' data integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Illustrator 0 <= 28.7.4
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved