EUVD-2026-22780
GHSA-34mc-mx9w-h5cv
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Adobe Framemaker versions 2022.8 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe FrameMaker 2022.8 and earlier allows local attackers to execute malicious code with current user privileges by tricking victims into opening specially crafted files. This use-after-free memory corruption vulnerability requires no authentication but depends on user interaction. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all FrameMaker 2022.8 and earlier deployments across the organization; restrict file-opening capabilities via endpoint controls if feasible. Within 7 days: Issue security advisory to FrameMaker users warning against opening files from untrusted sources; implement application whitelisting or disable FrameMaker launch of suspicious file types. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today