CVSS 3.1 Score 7.8 of 10 (high)


Published Dec 13, 2023
Updated: Dec 14, 2023
CWE ID 125


CVE-2023-47074 is an out-of-bounds read vulnerability that affects Adobe Illustrator versions 28.0 and 27.9. This vulnerability occurs when parsing a crafted file, allowing an attacker to read past the end of an allocated memory structure. Exploiting this vulnerability requires user interaction, where the victim must open a malicious file. By leveraging this vulnerability, an attacker could execute code within the context of the current user. The affected products include Adobe Illustrator versions 28.0 and earlier, as well as version 27.9 and earlier. To remediate this vulnerability, users should update their Adobe Illustrator software to a patched version provided by Adobe. This vulnerability poses a high risk to organizations, as it could lead to unauthorized code execution and potential compromise of sensitive information stored within the affected software.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-47074 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options