NULL Pointer Dereference Vulnerability in Adobe Framemaker
CVE-2026-104343

5.5MEDIUM

Key Information:

Vendor

Adobe

Vendor
CVE Published:
13 October 2026

What is CVE-2026-104343?

Adobe Framemaker contains a NULL Pointer Dereference vulnerability that can be exploited by attackers to trigger application crashes, resulting in a denial-of-service condition. Successful exploitation necessitates that a victim open a specially crafted malicious file, which initiates the vulnerability. Users of affected versions are advised to exercise caution when handling unknown files and to apply the latest security updates provided by Adobe.

Affected Version(s)

Adobe FrameMaker 2022 0 <= 17.0.9.866

Adobe FrameMaker 2026 0 <= 18.0.0.206

Adobe FrameMaker 2022 17.0.10.928

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.