CVEvulnerability
CVE-2026-21333
8.6 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-03-10
- Last modified
- 2026-08-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.6 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-426
Description
Illustrator versions 29.8.4, 30.1 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected configurations
• adobe illustrator (>= 29.0 < 29.8.5)
• adobe illustrator (>= 30.0 < 30.2)
Related
Weakness · CWE (1)
- CWE-426 Untrusted Search Path weakness