VDB

CVE-2026-34662

CVE-2026-34662 PUBLISHED CVSS 5.5 MEDIUM

Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS 0.02% · 5.4th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS Score
0.02%
5.4th percentile

Affected Products

VendorProductVersions
adobeillustrator30.0, 29.0, 30.0
AdobeIllustrator0, 0, 0

Timeline

  • May 12, 2026 CVE Published
  • May 12, 2026 CVE Updated
  • May 13, 2026 Security Advisory
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
  • May 25, 2026 EPSS Score
  • May 26, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›