CVE-2020-24413: Adobe Illustrator

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Affected products

• Adobe Illustrator: up to and including 24.1.2

Published 2020-10-20. Last modified 2026-06-17.