CVE-2026-48337 is an out-of-bounds write vulnerability in Adobe Illustrator Desktop 2026. This flaw could enable an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability requires user interaction and does not require elevated privileges to exploit. The CVSS 3.1 vector indicates low attack complexity, no privileges required, but user interaction is necessary, and it impacts confidentiality, integrity, and availability with high severity.

Successful exploitation can lead to arbitrary code execution with the current user's privileges, potentially compromising confidentiality, integrity, and availability of the affected system. Since the attack requires user interaction, the risk is limited to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Users should exercise caution when opening files from untrusted sources until a patch is available.