CVE-2026-104340: Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker must convince a victim to open a malicious file in Adobe FrameMaker. No attacker privileges are required, but exploitation is local and requires user interaction.
Who is exposed to the greatest risk?
Users who open untrusted or externally supplied files in Adobe FrameMaker are exposed. Successful exploitation can execute code with the privileges of the current user.
What can be done if patching is not immediately possible?
Avoid opening files from untrusted or unexpected sources in Adobe FrameMaker. Apply additional scrutiny to externally received FrameMaker files before they are opened.