Adobe Illustrator versions 30.2, 29.8.5, and earlier contain an out-of-bounds write vulnerability (CWE-787) that may lead to arbitrary code execution in the context of the current user. The vulnerability requires that the user open a malicious file to trigger the flaw. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No official remediation or patch has been disclosed as of the published date.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment within the scope of Adobe Illustrator. The attack requires user interaction, specifically opening a malicious file. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the Adobe advisory for current remediation guidance. Until a patch is available, users should exercise caution when opening files from untrusted sources and consider restricting access to Illustrator or running it in a controlled environment.