CVE-2026-75990

HighCVSS 8.6/10Last modified Sep 18, 2026

Description

Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
Adobe	Illustrator Desktop 2026	<= 30.7
Adobe	Illustrator Desktop 2025	<= 29.8.10

References

https://helpx.adobe.com/security/products/illustrator/apsb26-131.htmlVendor Advisory

Timeline

Published: Sep 8, 2026
Last modified: Sep 18, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-759918.6Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-759927.8Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-759938.5ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malic CVE-2026-759949.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curre CVE-2026-759958.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the cur CVE-2026-759967.5ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker c CVE-2026-759987.5ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit CVE-2026-759998.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the cur CVE-2026-76006.3A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/inde CVE-2026-760006.5ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker c CVE-2026-760017.1ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged att CVE-2026-760026.1ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL r