Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:illustrator:28.0:*:*:*:*:*:*:*

part: a version: 28.0 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductIllustrator (20b04346-6374-5556-9bf1-1dc6dbc755d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47075 vulnerable 2026-06-08 06:14:23.883185 ZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-12-13T09:30:08.696Z
Updated: 2024-08-02T21:01:22.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47074 vulnerable 2026-06-08 06:14:23.882663 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-12-13T09:30:09.506Z
Updated: 2025-05-22T18:10:17.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47063 vulnerable 2026-06-08 06:14:23.862697 Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.
HIGH (7.8)
Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-12-13T09:30:10.749Z
Updated: 2024-08-02T21:01:22.628Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.