CVE-2026-48334

CriticalCVSS 9.3/10Last modified Aug 28, 2026

Description

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2026
Last modified
Aug 28, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-483357.8Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-483367.8Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-483377.8Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-483386.8ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead toCVE-2026-483397.8Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the currentCVE-2026-48347.5The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.CVE-2026-483407.8Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the curCVE-2026-483417.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483427.8Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-483437.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483447.8Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code CVE-2026-483458.2Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that coul
CVE-2026-48334: Critical severity, CVSS 9.3 | Vulnix