← CVE Intelligence

CVE-2026-21288

Illustrator | NULL Pointer Dereference (CWE-476) PUBLISHED

Description (CNA)

Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Illustrator Desktop 2026affected 0 through 30.0; unaffected 30.1
Adobe / Illustrator Desktop 2025affected 0 through 29.8.3; unaffected 29.8.4

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.