EUVD-2026-22798Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Heap-based buffer overflow in Adobe FrameMaker 2022.8 and earlier allows local attackers to disclose sensitive information from process memory without user privileges, requiring only that a victim open a malicious document. CVSS 5.5 reflects confidentiality impact with low attack complexity, though no active exploitation or public proof-of-concept has been confirmed at analysis time.
Technical ContextAI
The vulnerability is a heap-based buffer overflow (CWE-122) in Adobe FrameMaker's document parsing logic. Heap overflows occur when a program writes data beyond allocated memory boundaries on the heap, potentially corrupting adjacent data structures or exposing sensitive information. In this case, the overflow is triggered during file processing when FrameMaker parses a specially crafted malicious document. The heap data exposure allows an attacker to read memory contents that may contain session tokens, cryptographic keys, or other confidential information. The local attack vector combined with required user interaction (opening a file) means exploitation is limited to scenarios where an attacker can deliver a malicious document to a target user and convince them to open it in FrameMaker.
RemediationAI
Adobe users should immediately update FrameMaker to a patched version released after 2022.8, following guidance in Adobe security bulletin APSB26-36 available at https://helpx.adobe.com/security/products/framemaker/apsb26-36.html. Pending patch deployment, reduce risk by restricting FrameMaker document opening to trusted sources, disabling automatic file opening from email or web downloads, and educating users to avoid opening unsolicited FrameMaker files (.fm, .book, or related formats). Organizations with centralized document intake should implement file scanning or conversion processes that prevent direct opening of untrusted FrameMaker documents in vulnerable versions.
Remote code execution in Adobe Flash Player 11.x through 18.x allows unauthenticated network attackers to execute arbitr
Remote code execution in Adobe Flash Player 21.0.0.226 and earlier allows unauthenticated network attackers to execute a
Adobe Flash Player contains a heap-based buffer overflow that allows remote code execution, exploited as a zero-day in J
Adobe Reader and Acrobat contain an unspecified U3D component vulnerability causing memory corruption that allows remote
Adobe Flash Player contains a type confusion vulnerability in object handling that allows remote attackers to execute ar
Adobe Reader and Acrobat 9.x, 8.x, and 7.x contain a stack-based buffer overflow in the getIcon method of the Collab obj
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma
Adobe Reader and Acrobat contain a use-after-free vulnerability in the Doc.media.newPlayer JavaScript method that was ac
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Window
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Heap Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today