What is the CVSS score of CVE-2026-27296?

CVE-2026-27296 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Adobe are affected by CVE-2026-27296?

Adobe FrameMaker versions 2022.8 and earlier contain a local code execution vulnerability that allows attackers to execute arbitrary commands with user privileges when a victim opens a malicious…

How to fix or mitigate CVE-2026-27296?

Within 24 hours: Inventory all FrameMaker installations and identify affected versions (2022.8 and earlier); communicate risk to affected user groups and restrict opening untrusted documents. Within 7 days: Disable FrameMaker file associations for external sources; enforce file review procedures requiring documents to be scanned and validated before opening. Within 30 days: Monitor Adobe PSIRT (APSB26-36) for patch release; upgrade to patched version immediately upon availability; consider alternative workflows or sandboxed FrameMaker instances for high-risk document types.

Adobe CVE-2026-27296

EUVD-2026-22788 HIGH

Integer Underflow (CWE-191)

2026-04-14 psirt@adobe.com

GHSA-6hg8-2cxf-7p6v

Integer Overflow RCE Adobe

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 15, 2026 - 01:11 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 23:22 euvd

EUVD-2026-22788

Analysis Generated

Apr 14, 2026 - 23:22 vuln.today

CVE Published

Apr 14, 2026 - 23:16 nvd

HIGH 7.8

DescriptionCVE.org

Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AnalysisAI

Arbitrary code execution in Adobe FrameMaker 2022.8 and earlier allows local attackers to execute malicious code with current user privileges through specially crafted files exploiting an integer underflow. Attack requires user interaction (opening a malicious file). CVSS 7.8 (High) reflects local attack vector with low complexity. No public exploit identified at time of analysis, and EPSS data not provided. Vendor advisory available at Adobe PSIRT (APSB26-36).

Technical ContextAI

This vulnerability stems from an Integer Underflow (CWE-191), also known as integer wraparound, in Adobe FrameMaker's file parsing routines. When processing specially crafted files, FrameMaker performs arithmetic operations that result in an integer wrapping to an unexpectedly small or negative value. This miscalculation typically leads to insufficient memory allocation or incorrect buffer size validation, creating conditions for memory corruption. The affected software is Adobe FrameMaker, a document processor for technical and enterprise publishing workflows, versions 2022.8 and all prior releases. Integer underflows in file parsers are particularly dangerous because they can bypass size checks that appear mathematically sound but fail when integer boundaries wrap, enabling buffer overflows, heap corruption, or out-of-bounds writes that attackers leverage for arbitrary code execution.

RemediationAI

Organizations should immediately upgrade Adobe FrameMaker to the patched version specified in Adobe Security Bulletin APSB26-36, available at https://helpx.adobe.com/security/products/framemaker/apsb26-36.html. The advisory will contain exact fixed version numbers and download instructions. Until patching is complete, implement defense-in-depth controls: restrict FrameMaker file opening to trusted sources only, deploy email attachment filtering to quarantine unexpected FrameMaker documents, enable Protected View or sandboxing features if available in the application, and educate users on risks of opening unsolicited files. Application whitelisting and endpoint detection solutions can provide additional runtime protection against exploitation attempts. Prioritize patching for systems processing documents from external or untrusted sources.