Out-of-Bounds Write Vulnerability in Adobe Illustrator by Adobe
CVE-2026-48335

7.8HIGH

Key Information:

Vendor

Adobe
Status
Illustrator Desktop 2026
Illustrator Desktop 2025
Vendor
CVE Published:
14 July 2026

What is CVE-2026-48335?

Adobe Illustrator is susceptible to an out-of-bounds write vulnerability that may allow arbitrary code execution with the current user's privileges. Attackers can exploit this vulnerability by tricking users into opening a specially crafted malicious file. It is crucial for users to be cautious about file sources and to keep their software updated to mitigate potential risks associated with such vulnerabilities.

Affected Version(s)

Illustrator Desktop 2025 0 <= 29.8.7

Illustrator Desktop 2025 0 <= 29.8.7

Illustrator Desktop 2026 0 <= 30.5

References

https://helpx.adobe.com/security/products/illustrator/aps...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.