CVE-2026-27300: Adobe Framemaker | Access of Uninitialized Pointer (CWE-824)
Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Because exploitation requires user interaction (victim must open a malicious file), restrict users from opening untrusted/malicious files (e.g., via email/file filtering and user guidance) to reduce exposure.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27300?
CVE-2026-27300 is classified as a high severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2026-27300?
To fix CVE-2026-27300, upgrade to Adobe Framemaker version 2022.9 or later.
What software is affected by CVE-2026-27300?
Adobe Framemaker versions 2022.8 and earlier are affected by CVE-2026-27300.
What type of vulnerability is CVE-2026-27300?
CVE-2026-27300 is an Access of Uninitialized Pointer vulnerability, which can lead to memory exposure.
Can CVE-2026-27300 lead to data breaches?
Yes, exploitation of CVE-2026-27300 could allow an attacker to disclose sensitive information, leading to potential data breaches.