CVE-2023-25860: 
Adobe Illustrator vulnerability analysis and mitigation

Adobe Illustrator versions 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability identified as CVE-2023-25860. The vulnerability was discovered by Mat Powell from Trend Micro Zero Day Initiative and was publicly disclosed in April 2023 (Adobe Advisory).

The vulnerability is classified as an out-of-bounds write issue (CWE-787) that could potentially lead to arbitrary code execution in the context of the current user. The severity of this vulnerability is rated as HIGH with a CVSS v3.1 base score of 7.8 (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The impact is significant as it could allow attackers to execute malicious code with the same privileges as the user running Adobe Illustrator (Adobe Advisory).

Adobe has addressed this vulnerability in the latest versions of Illustrator. Users are advised to update to Adobe Illustrator version 27.3.1 or later to mitigate this security issue (ManageEngine).