Product:
Adobe Framemaker
Summary
Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to access sensitive files or data on the system. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.3 | CVE-2026-27299 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by the victim using Adobe Framemaker, triggers the improper input validation. This allows the attacker to read sensitive files from the victim’s file system. The attack requires the victim to interact with the malicious file, making user awareness crucial in preventing exploitation.
Affected Products
- Adobe Framemaker 2022.8 and earlier: Vulnerable to improper input validation leading to arbitrary file system read.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure they are using the latest version of Adobe Framemaker. Regularly updating software can help protect against known vulnerabilities.