If successfully exploited, an attacker could gain complete control over the affected workstation. This includes the ability to view, modify, or delete files, as well as the capacity to install further malicious software, such as infostealers, backdoors, or ransomware. There is no evidence at this time of active, in-the-wild exploitation. Adobe has released security updates to patch these flaws, and immediate deployment is recommended to mitigate the risk of compromise.

Impact

Successful exploitation allows an attacker to gain unauthorized access to the victim's machine. The impact includes full compromise of the user's data, potential exfiltration of sensitive information, and the persistence of further malware on the target system. These vulnerabilities pose a significant risk to organizations where users frequently handle external graphics files, as the attack requires minimal interaction beyond opening a file.

Recommendation

• Immediately apply the security updates provided by Adobe for the affected Illustrator versions.
• Coordinate with internal IT departments to verify software versions and ensure patch deployment is completed across all endpoints.
• Monitor endpoint telemetry for unusual child processes spawned by Illustrator (e.g., cmd.exe, powershell.exe, wscript.exe) following the opening of document files.