CVE-2026-104341: Adobe Framemaker | Out-of-bounds Write (CWE-787)
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Adobe FrameMaker are exposed when they open a malicious file. Successful exploitation runs code in the context of the user who opens the file.
What does an attacker need to exploit it?
An attacker needs to persuade a victim to open a malicious file in Adobe FrameMaker. The supplied information indicates no privileges are required, but user interaction is required.
What can be done if patching is not immediately possible?
Avoid opening untrusted or unexpected files in Adobe FrameMaker, especially files received through unsolicited messages or other unverified sources.