Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Adobe Illustrator CC Allows Unprivileged Code to Run with High Privileges

CVE-2019-7962 · published 6 years ago
Summary

Adobe Illustrator CC versions 23.1 and earlier have a security weakness that allows unauthorized code to run with elevated privileges. This means that an attacker could potentially take control of your system or steal sensitive information. Update to the latest version of Adobe Illustrator CC to fix this issue.

What to do
  • Update adobe illustrator_cc to version 24.0 or later.
Affected software
VendorProductAffected versions
adobe illustrator_cc < 24.0
cpe:2.3:a:adobe:illustrator_cc:*:*:*:*:*:*:*:*
Original advisory text
Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-427Uncontrolled Search Path Element
Timeline
Published14 Nov 2019
Updated4 Nov 2026
First seen11 Mar 2026
Sources
CVE-2019-7962 · OSV
CVE-2019-7962 · NVD
Track software like this
Free during beta