CVE-2020-9575 describes a memory corruption vulnerability in Adobe Illustrator versions 24.1.2 and earlier, affecting both Windows and macOS platforms. This high-severity flaw, rated 7.8 CVSS, requires user interaction (e.g., opening a malicious file) and local access, but successful exploitation could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, there is limited public exploit intelligence, with no Metasploit or ExploitDB modules, though it has garnered some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 24.1.2CPE matchmatch criteria | cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.