EUVD-2026-22786
GHSA-573h-4gmm-4r9w
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write in Adobe FrameMaker 2022.8 and earlier enables arbitrary code execution when users open specially crafted malicious files. The vulnerability achieves full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH) but requires local access and user interaction, limiting immediate risk. No public exploit identified at time of analysis, and exploitation requires social engineering to deliver the malicious file to victims.
Technical ContextAI
This vulnerability stems from CWE-787 (Out-of-Bounds Write), a memory corruption class where the application writes data beyond allocated buffer boundaries. Adobe FrameMaker, a desktop publishing and document processing application used for technical documentation, fails to properly validate input when parsing specially formatted files. The out-of-bounds write occurs during file processing operations, allowing attackers to overwrite adjacent memory regions. When successfully exploited, this memory corruption enables hijacking of program execution flow, resulting in arbitrary code execution with the privileges of the current user. The local attack vector (AV:L) indicates the malicious file must be delivered and opened on the victim's system, typically through email attachments, file shares, or social engineering channels.
RemediationAI
Adobe has released security updates addressing this vulnerability in Adobe Security Bulletin APSB26-36. Users should immediately update to the patched version specified in the vendor advisory at https://helpx.adobe.com/security/products/framemaker/apsb26-36.html. Organizations should deploy updates through existing software distribution mechanisms and verify successful installation across all FrameMaker deployments. As interim mitigation until patching is complete, implement strict controls on opening FrameMaker files from untrusted sources, enforce email attachment filtering policies to block suspicious file types, and educate users on the risks of opening unsolicited documents. Disable FrameMaker file associations in environments where the application is installed but not actively required.
Remote code execution in Adobe Flash Player 11.x through 18.x allows unauthenticated network attackers to execute arbitr
Remote code execution in Adobe Flash Player 21.0.0.226 and earlier allows unauthenticated network attackers to execute a
Adobe Flash Player contains a heap-based buffer overflow that allows remote code execution, exploited as a zero-day in J
Adobe Reader and Acrobat contain an unspecified U3D component vulnerability causing memory corruption that allows remote
Adobe Flash Player contains a type confusion vulnerability in object handling that allows remote attackers to execute ar
Adobe Reader and Acrobat 9.x, 8.x, and 7.x contain a stack-based buffer overflow in the getIcon method of the Collab obj
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma
Adobe Reader and Acrobat contain a use-after-free vulnerability in the Doc.media.newPlayer JavaScript method that was ac
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Window
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today