CVE-2026-104342: Adobe Framemaker | Use After Free (CWE-416)
Published Oct 13, 2026
·Updated
Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Adobe FrameMaker
Event History
Oct 13, 2026
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must persuade a victim to open a malicious file in Adobe FrameMaker. The resulting code execution occurs in the context of the current user.
2
Who is most exposed?
Users who open untrusted or attacker-supplied files with Adobe FrameMaker are exposed. The impact depends on the permissions of the user running the application.
3
What can be done while a patch is not available or cannot be applied?
Avoid opening files from untrusted or unsolicited sources in Adobe FrameMaker. Treat unexpected FrameMaker documents as potentially malicious, since exploitation requires opening a crafted file.