CVE catalog

CVE-2026-34662

Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabili

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.16% · Oct 25, 2026

Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpeillustratorNot reported29.8.7fixed
CpeillustratorNot reported30.4fixed
CpeillustratorNot reported30.4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpeillustratorcpeNot reported29.8.7Not reportedNot reportedNot reported
CpeillustratorcpeNot reported30.4Not reportedNot reportedNot reported
CpeillustratorcpeNot reported30.4Not reportedNVD-CVE-2026-34662Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References