← Back

CVE-2026-21333

nvd nist
Published: Mar 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 6.0
Source: psirt@adobe.com (Secondary)

Description

Illustrator versions 29.8.4, 30.1 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (2)

Products: Adobe: Illustrator
Adobe
1 product
Illustrator
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
Illustrator
From 29.0 to 29.8.5
Illustrator
From 30.0 to 30.2
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

Source: psirt@adobe.com
Vendor Advisory

Timeline

No history available yet.