CVE-2026-103857: Adobe Framemaker | Out-of-bounds Read (CWE-125)
Published Oct 13, 2026
·Updated
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Adobe FrameMaker
Event History
Oct 13, 2026
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The attacker must provide a malicious file and persuade a victim to open it in Adobe FrameMaker. The vulnerability has local attack vector and requires user interaction; no privileges are required.
2
What is the likely impact if exploitation succeeds?
Successful exploitation could disclose sensitive information from memory. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.