CVE-2026-48275highCWE-426

CVE-2026-48275: high-severity vulnerability in Adobe Illustrator Desktop 2025

Illustrator | Untrusted Search Path (CWE-426)

Published · Updated

Follow this CVE+ Monitor Illustrator Desktop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.3%
Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Adobe · Illustrator Desktop 2025Adobe · Illustrator Desktop 2026
Related CVEs — Adobe Illustrator Desktop 2025

In the same product, most dangerous first.

CVE-2026-48334CRITICALIllustrator | Improper Input Validation (CWE-20)EPSS 1.0%CVE-2026-75991HIGHIllustrator | Improper Input Validation (CWE-20)EPSS 0.3%CVE-2026-75990HIGHIllustrator | Incorrect Authorization (CWE-863)EPSS 0.3%CVE-2026-71441MEDIUMIllustrator | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2026-21280HIGHIllustrator | Untrusted Search Path (CWE-426)EPSS 0.3%CVE-2026-75992HIGHIllustrator | Out-of-bounds Write (CWE-787)EPSS 0.3%