CVE-2025-27167

adobe illustrator

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-27167

Katalog CVE

CVSS 7.8 · High EPSS 0,23%

Kerentanan Untrusted Search Path pada adobe illustrator. Skor CVSS 3.1 7.8 (High) menurut adobe.com.

Deskripsi (NVD)

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts.

Rincian

Terbit di NVD
11 Maret 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.8 (High), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-426: Untrusted Search Path
EPSS (30 hari)
0,23% peluang dieksploitasi; lebih tinggi dari 13,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
adobe illustrator Versi 28.0 hingga sebelum 28.7.5
adobe illustrator Versi 29.0 hingga sebelum 29.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.