CVE-2026-75991— Illustrator | Improper Input Validation (CWE-20)
Quick assessment
Affected
Adobe Illustrator Desktop 2026
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
这段英文描述的是一个安全漏洞，通常出现在Adobe Illustrator软件的安全公告中。我们需要将其准确、专业地翻译成中文。 逐句分析与翻译策略： 1. 原文： 分析： "Improper Input Validation" 是标准术语，译为“输入验证不当”或“输入验证缺失”。 "arbitrary code execution" 译为“任意代码执行”。 "in the context of the current user" 译为“当前用户上下文”。 初译：Illustrator 受一个输入验证不当的漏洞影响
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Adobe | Illustrator Desktop 2025 | ≤ 29.8.10 |
affected |
29.8.11 |
unaffected | ||
| Adobe | Illustrator Desktop 2026 | ≤ 30.7 |
affected |
30.8 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-75991
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Illustrator | Improper Input Validation (CWE-20)
Source: CVE Program / CVE List V5
Vulnerability Description
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Adobe | Illustrator Desktop 2026 | 0 ~ 30.7 | - |
|
| Adobe | Illustrator Desktop 2025 | 0 ~ 29.8.10 | - |
|
II. Public POCs for CVE-2026-75991
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-75991
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-75991 (1)
-
🔗 Adobe Security Bulletin vendor-advisory
Same Patch Batch · Adobe · 2026-09-08 · 167 CVEs total
| CVE-2026-82004 | 10.0 CRITICAL | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS C |
| CVE-2026-19232 | 9.9 CRITICAL | Adobe Experience Manager | Incorrect Authorization (CWE-863) |
| CVE-2026-48273 | 9.9 CRITICAL | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval In |
| CVE-2026-76201 | 9.3 CRITICAL | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-76200 | 9.3 CRITICAL | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-75746 | 9.1 CRITICAL | ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje |
| CVE-2026-81996 | 8.8 HIGH | Acrobat Reader | Incorrect Authorization (CWE-863) |
| CVE-2026-77111 | 8.7 HIGH | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-77774 | 8.6 HIGH | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-77109 | 8.6 HIGH | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-75990 | 8.6 HIGH | Illustrator | Incorrect Authorization (CWE-863) |
| CVE-2026-76190 | 8.6 HIGH | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval In |
| CVE-2026-76199 | 8.6 HIGH | Photoshop Desktop | Uncontrolled Search Path Element (CWE-427) |
| CVE-2026-75993 | 8.5 HIGH | ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-75999 | 8.4 HIGH | ColdFusion | Improper Input Validation (CWE-20) |
| CVE-2026-76191 | 8.2 HIGH | Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-81994 | 8.2 HIGH | Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Proto |
| CVE-2026-76202 | 8.2 HIGH | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-81983 | 7.8 HIGH | Acrobat Reader | Out-of-bounds Write (CWE-787) |
| CVE-2026-79908 | 7.8 HIGH | Acrobat Reader | Out-of-bounds Write (CWE-787) |
Showing top 20 of 167 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Illustrator Desktop 2026
Same vendor: Adobe
V. Comments for CVE-2026-75991
No comments yet