CVE-2019-8248

CRITICAL

Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

Published: Nov 14, 2019 Modified: Jun 17, 2026

CWE-787

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

Vendor	Product	Version
adobe	illustrator_cc	* < 24.0

GitHub Security Advisory GHSA-4cv4-xw5w-v5qh

Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful...

References (2)

https://helpx.adobe.com/security/products/illustrator/apsb19-36.html Vendor Advisory
https://helpx.adobe.com/security/products/illustrator/apsb19-36.html Vendor Advisory

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 3.98%

Top 10% most likely to be exploited

Threat Score 40.4 / 100

Data Sources

NVD EPSS GitHub