high7.8
CVE-2022-23187
Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting…
Impact
Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Illustrator | from 25.0 before 25.4.5 from 26.0 before 26.1.0 |