CVE-2026-104342: Adobe Framemaker | Use After Free (CWE-416)
Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must persuade a victim to open a malicious file in Adobe FrameMaker. The resulting code execution occurs in the context of the current user.
Who is most exposed?
Users who open untrusted or attacker-supplied files with Adobe FrameMaker are exposed. The impact depends on the permissions of the user running the application.
What can be done while a patch is not available or cannot be applied?
Avoid opening files from untrusted or unsolicited sources in Adobe FrameMaker. Treat unexpected FrameMaker documents as potentially malicious, since exploitation requires opening a crafted file.