CVE-2020-24412

7.8 highEPSS 2.8%

High (7.8) in adobe illustrator. EPSS 2.8% chance of exploitation in the next 30 days.

Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-788
Published: 2020-10-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:illustrator

References

https://helpx.adobe.com/security/products/illustrator/apsb20-53.html
https://helpx.adobe.com/security/products/illustrator/apsb20-53.html

Check your stack JSON