EUVD-2026-22786
GHSA-573h-4gmm-4r9w
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write in Adobe FrameMaker 2022.8 and earlier enables arbitrary code execution when users open specially crafted malicious files. The vulnerability achieves full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH) but requires local access and user interaction, limiting immediate risk. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Issue security alert to all FrameMaker 2022.8 and earlier users warning against opening files from untrusted sources; implement email filtering rules to block suspicious attachments with FrameMaker-associated file types (.fm, .book). Within 7 days: Inventory all FrameMaker installations and versions across the organization; restrict FrameMaker use to a limited group of trusted administrators where possible, or disable it on high-risk endpoints. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today