What is the CVSS score of CVE-2026-27300?

CVE-2026-27300 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Framemaker CVE-2026-27300

EUVD-2026-22796 MEDIUM

Access of Uninitialized Pointer (CWE-824)

2026-04-14 psirt@adobe.com

Information Disclosure Memory Corruption Adobe Framemaker

5.5

CVSS 3.1 · Vendor: adobe

Severity by source

Vendor (adobe) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from Vendor (adobe) · only source for this CVE.

CVSS VectorVendor: adobe

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Apr 15, 2026 - 01:13 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 23:22 euvd

EUVD-2026-22796

Analysis Generated

Apr 14, 2026 - 23:22 vuln.today

CVE Published

Apr 14, 2026 - 23:16 nvd

MEDIUM 5.5

DescriptionCVE.org

Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AnalysisAI

Adobe FrameMaker 2022.8 and earlier suffers from uninitialized pointer access that leaks sensitive memory contents to local attackers. The vulnerability requires user interaction-a victim must open a specially crafted file-but once triggered, it bypasses memory protections and exposes confidential data without requiring authentication or modifying files. CVSS 5.5 reflects moderate severity (local attack vector, high confidentiality impact) with no public exploit identified at time of analysis.

Technical ContextAI

The vulnerability stems from CWE-824 (access of uninitialized pointer), a memory safety flaw where FrameMaker fails to initialize a pointer before dereferencing it during file parsing. When a user opens a malicious document, the uninitialized pointer may reference arbitrary memory locations controlled by the attacker's crafted file structure, allowing arbitrary memory reads. This is a classic memory corruption issue in C/C++-based applications; FrameMaker's document parsing engine (likely handling proprietary FM file formats) does not properly validate pointer initialization before use. The attack vector is local (AV:L) because the malicious file must reside on or be delivered to the victim's system; the user interaction requirement (UI:R) means user action (opening the file) is mandatory.

RemediationAI

Upgrade Adobe FrameMaker to version 2022.9 or later, which contains the fix for uninitialized pointer access. Users unable to patch immediately should avoid opening untrusted or suspicious FrameMaker files (.fm, .book, or related formats) from untrusted sources, and consider restricting file opening permissions in organizational policies. Additional detail and verification steps are available in the official Adobe security bulletin APSB26-36 at https://helpx.adobe.com/security/products/framemaker/apsb26-36.html.