CVE-2023-47075
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 13, 2023
Updated: Dec 14, 2023
CWE ID 416
Summary
CVE-2023-47075 is a Use After Free vulnerability affecting Adobe Illustrator versions 28.0 and earlier, as well as 27.9 and earlier. This issue allows an attacker to execute arbitrary code in the context of the current user, should they open a maliciously crafted file. Although user interaction is required to exploit this vulnerability, it poses a significant risk due to its potential for code execution. Adobe has released patches to address this issue, and users are encouraged to update their software as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Illustrator
Affected Vendors
- Adobe