PT-2026-32947 · Adobe · Framemaker

Published 2026-04-14 · Updated 2026-04-23 · CVE-2026-27298

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9

Description An Access of Resource Using Incompatible Type (Type Confusion) issue exists, which could lead to arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interaction.

Recommendations Update to a version newer than 2022.8.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2026-05378

CVE-2026-27298

Affected Products

Framemaker

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-27298 · Security Note
• https://helpx.adobe.com/security/products/framemaker/apsb26-36.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05378 · Security Note
• https://twitter.com/integ_sec/status/2044772291616047558 · Twitter Post
• https://twitter.com/ptdbugs/status/2044358563061989713 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044269702491312243 · Twitter Post
• https://twitter.com/giuseppe_1337/status/2047134679250190630 · Twitter Post
• https://twitter.com/CVEnew/status/2044338879260688852 · Twitter Post