GCVE-110-NCSC-2026-14

Advisory PublishedCVSS 8.6/10

Vulnetix · Advisory published January 15, 2026

Illustrator versions 29.8.3, 30.0, and earlier are susceptible to an Untrusted Search Path vulnerability that may enable arbitrary code execution through malicious files.

Download JSON Open in Console

Weaknesses (CWE)

CWE-426Untrusted Search PathCWE-476NULL Pointer Dereference

Risk Scores

CVSS 3.1

8.6/10

High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Adobe	vers:unknown/*	—	—

Aliases

CVE-2026-21280 CVE-2026-21288

References

advisory

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON