CVE-2026-75992: Out-of-bounds Write (CWE-787) in Adobe Illustrator Desktop 2026

CVE-2026-75992 is an out-of-bounds write vulnerability in Adobe Illustrator Desktop 2026. This flaw could lead to arbitrary code execution in the context of the current user if a victim opens a crafted malicious file. The vulnerability requires user interaction and has a CVSS 3.1 score of 7.8 with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local attack vector with low complexity, no privileges required, user interaction needed, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the user's environment. The attack requires the user to open a malicious file, limiting remote exploitation without user action.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening files from untrusted sources.