Product:
Adobe Framemaker
Summary
Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-27298 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by the victim using Adobe Framemaker, triggers the type confusion. This allows the attacker to execute arbitrary code within the context of the current user, potentially leading to unauthorized access or control over the affected system.
Affected Products
- Adobe Framemaker 2022.8 and earlier: Vulnerable to type confusion leading to arbitrary code execution.
Mitigation
Users are advised to avoid opening untrusted files in Adobe Framemaker and to ensure they are using the latest version of the software. Regular updates and patches from Adobe should be applied to mitigate the risk of exploitation.