CVE-2026-34663 is an out-of-bounds read vulnerability in Adobe Illustrator (versions 29.8.6, 30.3, and earlier) that allows an attacker to read memory beyond the intended buffer boundaries. This flaw could be exploited by convincing a user to open a crafted malicious file, potentially leading to disclosure of sensitive information from the application's memory space. The vulnerability does not affect integrity or availability but poses a confidentiality risk. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, and user interaction needed. As of the published date, no official fix or patch has been documented.

Successful exploitation can lead to disclosure of sensitive memory contents from Adobe Illustrator, potentially exposing confidential information. The vulnerability does not impact system integrity or availability. Exploitation requires user interaction (opening a malicious file) and local access to the vulnerable application.

Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. No official mitigation or workaround has been provided by Adobe at this time.