deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-33202
Published: 2025-11-11
Description: NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33202; https://nvidia.custhelp.com/app/answers/detail/a_id/5723; https://www.cve.org/CVERecord?id=CVE-2025-33202
CVE: CVE-2025-35963
Published: 2025-11-11
Description: Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.
CVSS Score: 7.4 (HIGH)
CWE: CWE-691
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html
CVE: CVE-2025-35967
Published: 2025-11-11
Description: Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.
CVSS Score: 7.4 (HIGH)
CWE: CWE-125
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html
CVE: CVE-2025-35968
Published: 2025-11-11
Description: Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01395.html
CVE: CVE-2025-35971
Published: 2025-11-11
Description: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html
CVE: CVE-2025-35972
Published: 2025-11-11
Description: Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01386.html
CVE: CVE-2025-61814
Published: 2025-11-11
Description: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/indesign/apsb25-106.html
CVE: CVE-2025-61815
Published: 2025-11-11
Description: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/indesign/apsb25-106.html
CVE: CVE-2025-61816
Published: 2025-11-11
Description: InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/incopy/apsb25-107.html
CVE: CVE-2025-61817
Published: 2025-11-11
Description: InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/incopy/apsb25-107.html
CVE: CVE-2025-61818
Published: 2025-11-11
Description: InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/incopy/apsb25-107.html
CVE: CVE-2025-61824
Published: 2025-11-11
Description: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb25-106.html
CVE: CVE-2025-61832
Published: 2025-11-11
Description: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb25-106.html
CVE: CVE-2025-30398
Published: 2025-11-11
Description: Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398
CVE: CVE-2025-47179
Published: 2025-11-11
Description: Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47179
CVE: CVE-2025-59240
Published: 2025-11-11
Description: Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59240
CVE: CVE-2025-59499
Published: 2025-11-11
Description: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59499
CVE: CVE-2025-59504
Published: 2025-11-11
Description: Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59504
CVE: CVE-2025-59505
Published: 2025-11-11
Description: Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59505
CVE: CVE-2025-59506
Published: 2025-11-11
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59506
CVE: CVE-2025-59507
Published: 2025-11-11
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59507
CVE: CVE-2025-59508
Published: 2025-11-11
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59508
CVE: CVE-2025-59509
Published: 2025-11-11
Description: Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-201
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59509
CVE: CVE-2025-59510
Published: 2025-11-11
Description: Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59510
CVE: CVE-2025-59511
Published: 2025-11-11
Description: External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59511
CVE: CVE-2025-59512
Published: 2025-11-11
Description: Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59512; https://www.vicarius.io/vsociety/posts/cve-2025-59512-detection-script-eop-vulnerability-affecting-ceip-by-microsoft; https://www.vicarius.io/vsociety/posts/cve-2025-59512-mitigation-script-eop-vulnerability-affecting-ceip-by-microsoft
CVE: CVE-2025-59513
Published: 2025-11-11
Description: Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59513
CVE: CVE-2025-59514
Published: 2025-11-11
Description: Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59514
CVE: CVE-2025-59515
Published: 2025-11-11
Description: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59515
CVE: CVE-2025-60703
Published: 2025-11-11
Description: Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60703
CVE: CVE-2025-60704
Published: 2025-11-11
Description: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-325
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60704
CVE: CVE-2025-60705
Published: 2025-11-11
Description: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60705
CVE: CVE-2025-60706
Published: 2025-11-11
Description: Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60706
CVE: CVE-2025-60707
Published: 2025-11-11
Description: Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60707; https://www.vicarius.io/vsociety/posts/cve-2025-60707-detection-script-eop-vulnerability-in-multimedia-class-scheduler-service-by-microsoft; https://www.vicarius.io/vsociety/posts/cve-2025-60707-mitigation-script-eop-vulnerability-in-multimedia-class-scheduler-service-by-microsoft
CVE: CVE-2025-60708
Published: 2025-11-11
Description: Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60708
CVE: CVE-2025-60709
Published: 2025-11-11
Description: Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60709
CVE: CVE-2025-60710
Published: 2025-11-11
Description: Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710; https://www.vicarius.io/vsociety/posts/cve-2025-60710-detection-script-eop-vulnerability-in-host-process-for-windows-tasks; https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability-in-host-process-for-windows-tasks
CVE: CVE-2025-60713
Published: 2025-11-11
Description: Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60713
CVE: CVE-2025-60714
Published: 2025-11-11
Description: Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60714
CVE: CVE-2025-60715
Published: 2025-11-11
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60715
CVE: CVE-2025-60716
Published: 2025-11-11
Description: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60716
CVE: CVE-2025-60717
Published: 2025-11-11
Description: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60717
CVE: CVE-2025-60718
Published: 2025-11-11
Description: Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60718
CVE: CVE-2025-60719
Published: 2025-11-11
Description: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60719
CVE: CVE-2025-60720
Published: 2025-11-11
Description: Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60720
CVE: CVE-2025-60721
Published: 2025-11-11
Description: Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-270
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60721
CVE: CVE-2025-60722
Published: 2025-11-11
Description: Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60722
CVE: CVE-2025-60723
Published: 2025-11-11
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60723
CVE: CVE-2025-60724
Published: 2025-11-11
Description: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60724
CVE: CVE-2025-60726
Published: 2025-11-11
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60726
CVE: CVE-2025-60727
Published: 2025-11-11
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60727
CVE: CVE-2025-60728
Published: 2025-11-11
Description: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60728
CVE: CVE-2025-61819
Published: 2025-11-11
Description: Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb25-108.html
CVE: CVE-2025-61820
Published: 2025-11-11
Description: Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb25-109.html
CVE: CVE-2025-61826
Published: 2025-11-11
Description: Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html
CVE: CVE-2025-61827
Published: 2025-11-11
Description: Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html
CVE: CVE-2025-61828
Published: 2025-11-11
Description: Illustrator on iPad versions 3.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html
CVE: CVE-2025-61829
Published: 2025-11-11
Description: Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html
CVE: CVE-2025-61831
Published: 2025-11-11
Description: Illustrator versions 28.7.10, 29.8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb25-109.html
CVE: CVE-2025-61836
Published: 2025-11-11
Description: Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html