Skip to main content

Illustrator CVE-2026-34661

| EUVDEUVD-2026-29616 HIGH
Out-of-bounds Write (CWE-787)
2026-05-12 psirt@adobe.com GHSA-27qv-6m8p-ww7g
Memory Corruption Buffer Overflow RCE Illustrator
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 12, 2026 - 18:17 nvd
HIGH 7.8

DescriptionCVE.org

Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Analysis

Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

More in Illustrator

View all
CVE-2012-0780 CRITICAL POC
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
CVE-2012-2025 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
CVE-2012-2024 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
CVE-2012-2026 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
CVE-2012-2023 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
CVE-2014-0513 CRITICAL
10.0 May 14

Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to e
CVE-2012-2042 CRITICAL
10.0 May 24

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
CVE-2021-21105 HIGH
8.8 Sep 08

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c
CVE-2021-21104 HIGH
8.8 Sep 08

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c
CVE-2021-21103 HIGH
8.8 Sep 08

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c
CVE-2021-21102 HIGH
8.8 Jun 28

Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially craf
CVE-2021-21101 HIGH
8.8 Jun 28

Adobe Illustrator version 25.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a speciall

Same weakness CWE-787 – Out-of-bounds Write

View all
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2012-1889 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8
CVE-2014-1761 HIGH POC
7.8
CVE-2009-3129 HIGH POC
7.8
CVE-2021-1732 HIGH POC
7.8
CVE-2013-3346 CRITICAL POC
9.8

Same technique Memory Corruption

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2026-34661 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy