EUVD-2026-22790CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe FrameMaker 2022.8 and earlier allows local attackers to execute code in user context by delivering malicious FrameMaker documents that trigger integer underflow during file parsing. Attack requires social engineering to convince targets to open crafted files. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all FrameMaker installations and identify users with versions 2022.8 or earlier; communicate security advisory to affected teams emphasizing document handling procedures. Within 7 days: Implement application control policies restricting FrameMaker document execution from untrusted sources and disable macros/scripting features if available; consider restricting document sharing channels. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today