Adobe Illustrator versions 29.8.6, 30.3, and earlier contain an out-of-bounds write vulnerability (CWE-787) that may lead to arbitrary code execution in the context of the current user. The vulnerability requires that a victim open a malicious file to trigger the issue. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with low attack complexity but requiring user interaction. No vendor advisory or patch information has been provided yet.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system under the user's context. The attack requires user interaction by opening a malicious file. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should exercise caution when opening files from untrusted sources and consider restricting access to Illustrator or using application whitelisting to limit potential impact.