CVE-2022-23187: Adobe Illustrator 2022 Buffer Overflow could lead to Arbitrary code execution
Published Mar 11, 2022
·Updated
Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.
Affected Software
4 affected components
Adobe Illustrator>=25.0<25.4.5
Adobe Illustrator>=26.0<26.1.0
macOS
Microsoft Windows
Event History
Mar 11, 2022
CVE Published
via MITRE·05:54 PM
Data Sourced
via MITRE·05:54 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Adobe Illustrator vulnerability?
The vulnerability ID for this Adobe Illustrator vulnerability is CVE-2022-23187.
2
What is the severity of CVE-2022-23187?
CVE-2022-23187 has a severity rating of 7.8 (critical).
3
What is the affected software for this vulnerability?
The affected software for CVE-2022-23187 is Adobe Illustrator version 26.0.3 (and earlier).
4
What is the potential impact of CVE-2022-23187?
CVE-2022-23187 can potentially result in arbitrary code execution in the context of the current user.
5
How can CVE-2022-23187 be exploited?
CVE-2022-23187 requires user interaction in that a victim must open a crafted file.