CVE-2026-34661 is an out-of-bounds write vulnerability (CWE-787) affecting Adobe Illustrator versions 29.8.6, 30.3, and earlier. This flaw allows an attacker to execute arbitrary code within the context of the current user if the victim opens a crafted malicious file. The vulnerability requires user interaction and has a high impact on confidentiality, integrity, and availability as indicated by its CVSS vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No patch or official remediation level has been disclosed yet.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the affected system's user context. The vulnerability affects confidentiality, integrity, and availability at a high level. However, exploitation requires user interaction (opening a malicious file), and no active exploits are currently known.

Patch status is not yet confirmed — check the Adobe advisory for current remediation guidance. Until a patch is available, users should exercise caution when opening files from untrusted sources and consider restricting access to Illustrator or running it in a controlled environment.