CVE-2026-75991: Illustrator | Improper Input Validation (CWE-20)
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Illustrator users who open a malicious file are exposed. Any code execution would occur in the context of the current user.
What must an attacker do to exploit this issue?
The attacker must persuade a victim to open a malicious file in Illustrator. No attacker privileges are required, but user interaction is required.
What is the potential impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution with the current user's privileges. The listed impact includes high confidentiality, integrity, and availability effects, with changed scope.