Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2026-21288

Illustrator | NULL Pointer Dereference (CWE-476)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Illustrator Desktop 2026

Default version status: unaffected

  • 0 to ≤ 30.0affected
  • 30.1unaffected

Adobe Illustrator Desktop 2025

Default version status: unaffected

  • 0 to ≤ 29.8.3affected
  • 29.8.4unaffected

References