EUVD-2026-22784Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds read in Adobe FrameMaker 2022.8 and earlier enables arbitrary code execution when users open malicious crafted files. Exploitation requires local access and user interaction (CVSS 7.8, AV:L/UI:R), allowing attackers to execute code with current user privileges and achieve high confidentiality, integrity, and availability impact. EPSS data not available; no confirmed active exploitation (CISA KEV) or public exploit code identified at time of analysis. Adobe has released security bulletin APSB26-36 addressing this vulnerability.
Technical ContextAI
This vulnerability stems from improper bounds checking during file parsing operations in Adobe FrameMaker, a document processor for technical documentation and publishing. The CWE-125 classification indicates a classic out-of-bounds read flaw where the application reads data past the end of an allocated buffer when processing specially crafted input files. While categorized as an out-of-bounds read (typically associated with information disclosure), Adobe's advisory confirms this can be weaponized for code execution-likely through techniques such as leveraging the disclosed memory contents to bypass ASLR, chain with other vulnerabilities, or trigger further memory corruption. The vulnerability affects Adobe FrameMaker versions 2022.8 and all prior releases, indicating a potentially long-standing code defect in the file parsing engine that handles proprietary or complex document formats.
RemediationAI
Organizations should immediately apply the security updates detailed in Adobe Security Bulletin APSB26-36 available at https://helpx.adobe.com/security/products/framemaker/apsb26-36.html. The vendor advisory specifies patched versions that address CVE-2026-27294 along with installation procedures for enterprise deployments. Until patches can be deployed, implement defense-in-depth controls including restricting FrameMaker file-opening privileges to trusted document sources only, enabling application-level sandboxing or virtualization where supported, deploying endpoint detection and response solutions configured to monitor FrameMaker process behavior for anomalies, and conducting user security awareness training emphasizing the risks of opening unsolicited FrameMaker documents from unknown senders. For high-security environments, consider temporarily restricting FrameMaker usage to air-gapped systems or disabling the application until patches are verified and deployed.
Remote code execution in Adobe Flash Player 11.x through 18.x allows unauthenticated network attackers to execute arbitr
Remote code execution in Adobe Flash Player 21.0.0.226 and earlier allows unauthenticated network attackers to execute a
Adobe Flash Player contains a heap-based buffer overflow that allows remote code execution, exploited as a zero-day in J
Adobe Reader and Acrobat contain an unspecified U3D component vulnerability causing memory corruption that allows remote
Adobe Flash Player contains a type confusion vulnerability in object handling that allows remote attackers to execute ar
Adobe Reader and Acrobat 9.x, 8.x, and 7.x contain a stack-based buffer overflow in the getIcon method of the Collab obj
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma
Adobe Reader and Acrobat contain a use-after-free vulnerability in the Doc.media.newPlayer JavaScript method that was ac
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Window
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today