What is the CVSS score of CVE-2026-27301?

CVE-2026-27301 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Framemaker CVE-2026-27301

EUVD-2026-22798 MEDIUM

Heap-based Buffer Overflow (CWE-122)

2026-04-14 psirt@adobe.com

Buffer Overflow Heap Overflow Adobe Framemaker

5.5

CVSS 3.1 · Vendor: adobe

Severity by source

Vendor (adobe) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from Vendor (adobe) · only source for this CVE.

CVSS VectorVendor: adobe

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Apr 15, 2026 - 01:13 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 23:22 euvd

EUVD-2026-22798

Analysis Generated

Apr 14, 2026 - 23:22 vuln.today

CVE Published

Apr 14, 2026 - 23:16 nvd

MEDIUM 5.5

DescriptionCVE.org

Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AnalysisAI

Heap-based buffer overflow in Adobe FrameMaker 2022.8 and earlier allows local attackers to disclose sensitive information from process memory without user privileges, requiring only that a victim open a malicious document. CVSS 5.5 reflects confidentiality impact with low attack complexity, though no active exploitation or public proof-of-concept has been confirmed at analysis time.

Technical ContextAI

The vulnerability is a heap-based buffer overflow (CWE-122) in Adobe FrameMaker's document parsing logic. Heap overflows occur when a program writes data beyond allocated memory boundaries on the heap, potentially corrupting adjacent data structures or exposing sensitive information. In this case, the overflow is triggered during file processing when FrameMaker parses a specially crafted malicious document. The heap data exposure allows an attacker to read memory contents that may contain session tokens, cryptographic keys, or other confidential information. The local attack vector combined with required user interaction (opening a file) means exploitation is limited to scenarios where an attacker can deliver a malicious document to a target user and convince them to open it in FrameMaker.

RemediationAI

Adobe users should immediately update FrameMaker to a patched version released after 2022.8, following guidance in Adobe security bulletin APSB26-36 available at https://helpx.adobe.com/security/products/framemaker/apsb26-36.html. Pending patch deployment, reduce risk by restricting FrameMaker document opening to trusted sources, disabling automatic file opening from email or web downloads, and educating users to avoid opening unsolicited FrameMaker files (.fm, .book, or related formats). Organizations with centralized document intake should implement file scanning or conversion processes that prevent direct opening of untrusted FrameMaker documents in vulnerable versions.