Security Updates Available for Adobe Illustrator | APSB21-12
Bulletin ID Date Published Priority
ASPB21-12  February 09, 2021       3

Summary

Adobe has released an update for Adobe Illustrator 2021. This update resolves multiple critical vulnerabilities that could lead to arbitrary code execution in the context of current user.       

Affected Versions

Product Version Platform
Illustrator 2021
25.1  and earlier versions   
Windows

Solution

Adobe categorizes these updates with the following  priority ratings  and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism.  For more information, please reference this help page.

Product Version Platform Priority Availability
Illustrator 2021     25.2
Windows and macOS 3 Download Page

Vulnerability details

Vulnerability Category Vulnerability Impact Severity CVE Numbers
Out-of-bounds write 
Arbitrary code execution   Critical

CVE-2021-21053

CVE-2021-21054

Acknowledgments

Adobe would like to thank rgod working with Trend Micro Zero Day Initiative for reporting the relevant issues and for working with Adobe to help protect our customers