CVE-2022-23186

Name of the Vulnerable Software and Affected Versions Adobe Illustrator versions 25.4.3 and earlier Adobe Illustrator versions 26.0.2 and earlier

Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file, specifically a CDR file, which is associated with the vulnerability.

Recommendations For Adobe Illustrator versions 25.4.3 and earlier, update to a version later than 25.4.3 to resolve the issue. For Adobe Illustrator versions 26.0.2 and earlier, update to a version later than 26.0.2 to resolve the issue. As a temporary workaround, consider avoiding the use of CDR files in Adobe Illustrator until a patch is available.