CVE-2026-75991 is an improper input validation vulnerability (CWE-20) in Adobe Illustrator Desktop 2026. This flaw allows an attacker to execute arbitrary code in the context of the current user after the victim opens a crafted malicious file. The vulnerability changes the security scope and impacts confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.6, reflecting high severity with local attack vector, low attack complexity, no privileges required, user interaction required, and complete impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially allowing an attacker to fully compromise the affected system's confidentiality, integrity, and availability. The attack requires user interaction (opening a malicious file), limiting remote exploitation without user involvement.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources and follow Adobe's security recommendations once published.