[NEU] [hoch] Adobe Creative Cloud (Illustrator und Animate): Mehrere Schwachstellen ermöglichen Codeausführung
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3247
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-76191 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75990 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75991 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75992 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownNCSC-2026-0364 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Illustratorncsc-nl
- highCVE-2026-75992: Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary…nvd
- highCVE-2026-75991: Illustrator is affected by an Improper Input Validation vulnerability that could result in arb…nvd
- highCVE-2026-75990: Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbit…nvd
- highCVE-2026-76191: Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerabil…nvd
Recent advisories for Adobe Creative Cloud
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[UPDATE] [medium] Adobe Creative Cloud applications: Multiple vulnerabilitiescert-bund · 2026-08-28
- medium[NEW] [medium] Adobe Creative Cloud (Substance 3D, XD, and Illustrator): Multiple vulnerabilitiescert-bund · 2026-08-26
- high[NEW] [high] Adobe Creative Cloud (Lightroom Classic): Multiple vulnerabilities enable Code Executioncert-bund · 2026-08-12
- high[NEW] [high] Adobe Creative Cloud (Bridge and Format Plugins): Multiple vulnerabilitiescert-bund · 2026-07-29
- high[NEW] [high] Adobe Creative Cloud Applications: Multiple vulnerabilitiescert-bund · 2026-07-15
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [mittel] OpenSSH: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10
- high[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] gzip: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10