Integer Underflow Vulnerability in Adobe Framemaker
CVE-2026-27297

7.8HIGH

Key Information:

Vendor

Adobe
Status
Adobe Framemaker
Vendor
CVE Published:
14 April 2026

What is CVE-2026-27297?

Adobe Framemaker versions up to and including 2022.8 contain an Integer Underflow vulnerability that could allow an attacker to execute arbitrary code within the context of the current user. To successfully exploit this vulnerability, an attacker must trick the user into opening a specially crafted file, which may lead to unauthorized actions and a breach of system integrity.

Affected Version(s)

Adobe Framemaker 0 <= 2022.8

References

https://helpx.adobe.com/security/products/framemaker/apsb...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.