Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-23187

No fix known EPSS 4%CVSS 7.8

Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.

Published 2022-03-11 · CVE record · OSV

Products: adobe illustrator