CVE-2022-23187: Adobe Illustrator

High severity, CVSS 7.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.

Affected products

• Adobe Illustrator: from 25.0, before 25.4.5 (fixed in 25.4.5); from 26.0, before 26.1.0 (fixed in 26.1.0)

Published 2022-03-11. Last modified 2026-06-17.