CVE-2026-71441: Out-of-bounds Read (CWE-125) in Adobe Illustrator Desktop 2026

CVE-2026-71441 is an out-of-bounds read vulnerability (CWE-125) in Adobe Illustrator Desktop 2026. This flaw allows an attacker to read memory beyond the intended buffer boundaries, potentially disclosing sensitive information. Successful exploitation requires a victim to open a crafted malicious file, enabling the attacker to access sensitive memory contents. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity level with attack vector local, low attack complexity, no privileges required, user interaction required, and impact limited to confidentiality.

The vulnerability can lead to disclosure of sensitive information from the application's memory. There is no indication of impact on integrity or availability. Exploitation requires user interaction, limiting the attack scope to scenarios where a victim opens a malicious file.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the Adobe advisory for current remediation guidance. Until a fix is available, users should avoid opening files from untrusted sources to mitigate risk.