PT-2026-32944 · Adobe · Framemaker
Jann Horn
·
Published
2026-04-14
·
Updated
2026-04-23
·
CVE-2026-27295
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Framemaker versions prior to 2022.9
Description
An out-of-bounds write issue exists where the software writes data past the end of the intended buffer, which could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically requiring a victim to open a malicious file.
Recommendations
Update to a version newer than 2022.8.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Framemaker