CVE-2026-48334: falha crítica em Adobe Illustrator Desktop 2025
Illustrator | Improper Input Validation (CWE-20)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 1.0%
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVEs relacionadas — Adobe Illustrator Desktop 2025
No mesmo produto, das mais perigosas para as menos.
CVE-2026-75991HIGHIllustrator | Improper Input Validation (CWE-20)EPSS 0.3%CVE-2026-48275HIGHIllustrator | Untrusted Search Path (CWE-426)EPSS 0.3%CVE-2026-75990HIGHIllustrator | Incorrect Authorization (CWE-863)EPSS 0.3%CVE-2026-71441MEDIUMIllustrator | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2026-21280HIGHIllustrator | Untrusted Search Path (CWE-426)EPSS 0.3%CVE-2026-75992HIGHIllustrator | Out-of-bounds Write (CWE-787)EPSS 0.3%