Adobe Illustrator CS5.5 vulnerabilities

6 CVEs affecting Adobe Illustrator CS5.5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-2042, published 2012-05-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0780, published 2012-05-09. High severity, CVSS 10.0. EPSS: 15% chance of exploitation in the next 30 days. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023,…
CVE-2012-2026, published 2012-05-09. High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780,…
CVE-2012-2025, published 2012-05-09. High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780,…
CVE-2012-2024, published 2012-05-09. High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780,…
CVE-2012-2023, published 2012-05-09. High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780,…
CVE-2012-2042, published 2012-05-24. High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780,…