Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3817 articles · 152949 vulns · 36/41 feeds (7d)
← Back to list
7.8
CVE-2026-34687EXPLOITEDPATCHED
adobe · illustrator

Illustrator | Heap-based Buffer Overflow (CWE-122)

Description

Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Products

VendorProductVersions
adobeillustrator0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobecreative cloudcert_advisory90%

References

  • https://helpx.adobe.com/security/products/illustrator/apsb26-51.html(vendor-advisory)

Related News (2 articles)

Tier B
BSI Advisories5h ago
[NEU] [mittel] Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB19h ago
CVE-2026-34687 | Adobe Illustrator up to 29.8.6/30.3 File heap-based overflow (apsb26-51)
→ No new info (linked only)
CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
https://helpx.adobe.com/security/products/illustrator/apsb26-51.html
CWECWE-122
PublishedMay 12, 2026
Last enriched19h agov2
Trending Score62
Source articles2
Independent2
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-34643EXP
After Effects | Out-of-bounds Write (CWE-787)
Trending: 62
HIGHCVE-2026-34675EXP
Substance3D - Painter | Out-of-bounds Write (CWE-787)
Trending: 62
HIGHCVE-2026-34639EXP
Media Encoder | Out-of-bounds Write (CWE-787)
Trending: 62
HIGHCVE-2026-34637EXP
Premiere Pro | Out-of-bounds Write (CWE-787)
Trending: 62
HIGHCVE-2026-34682EXP
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Trending: 62

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
May 12, 2026
Discovered by ZDM
May 12, 2026
Updated: severity, activelyExploited
May 12, 2026
Actively Exploited
May 13, 2026
Patch Available
May 13, 2026

Version History

v2
Last enriched 19h ago
v2Tier C19h ago

Updated severity to CRITICAL, marked as actively exploited, and noted that no exploit exists.

severityactivelyExploited
via VulDB
v119h ago

Initial creation