CVE-2026-34618 is an out-of-bounds write vulnerability in Adobe Illustrator (versions 30.2, 29.8.5, and earlier) that may lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction, as exploitation involves opening a crafted malicious file. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided, and no known active exploitation has been reported.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. Since user interaction is required, the risk is mitigated by user caution. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening files from untrusted sources and apply standard security best practices to limit exposure.