Bulletin ID
Security Updates Available for Adobe Illustrator | APSB21-42
Bulletin ID |
Date Published |
Priority |
---|---|---|
ASPB21-42 |
July 13, 2021 |
3 |
Product |
Version |
Platform |
---|---|---|
Illustrator 2021 |
25.2.3 and earlier versions |
Windows |
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
Product |
Version |
Platform |
Priority |
Availability |
---|---|---|---|---|
Illustrator 2021 |
25.3 |
Windows and macOS |
3 |
Vulnerability Category |
Vulnerability Impact |
Severity |
CVSS base score |
CVE Numbers |
|
---|---|---|---|---|---|
Use After Free (CWE-416) |
Arbitrary file system read |
Important |
3.3 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
CVE-2021-28593 CVE-2021-36008 |
Out-of-bounds write (CWE-787) |
Arbitrary code execution |
Critical |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CVE-2021-28591 CVE-2021-28592 |
Adobe would like to thank the following researchers for reporting these issues and for working with Adobe to help protect our customers:
July 19, 2021: Inlcuded details about CVE-2021-36010, CVE-2021-36009, CVE-2021-36008.
July 20, 2021: Included details about CVE-2021-36011
For more information, visit https://helpx.adobe.com/security.html , or email PSIRT@adobe.com
Sign in to your account