Out-of-Bounds Write Vulnerability in Adobe Framemaker
CVE-2026-103967

7.8HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
13 October 2026

What is CVE-2026-103967?

Adobe Framemaker is vulnerable to an out-of-bounds write issue that can permit arbitrary code execution under the privileges of the current user. Successful exploitation necessitates user interaction, particularly the opening of specially crafted files that exploit this vulnerability. Users are advised to apply patches promptly and avoid opening untrusted files to mitigate risk.

Affected Version(s)

Adobe FrameMaker 2022 0 <= 17.0.9.866

Adobe FrameMaker 2026 0 <= 18.0.0.206

Adobe FrameMaker 2022 17.0.10.928

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.