Adobe Framemaker vulnerabilities

CVE-2020-3735 [HIGH] CWE-787 CVE-2020-3735: Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploita Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

CVE-2020-3731 [HIGH] CWE-787 CVE-2020-3731: Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploita Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

CVE-2020-3734 [HIGH] CWE-787 CVE-2020-3734: Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitat Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution.

CVE-2026-27290 [HIGH] CWE-426 CVE-2026-27290: Adobe Framemaker versions 2022.8 and earlier are affected by an Untrusted Search Path vulnerability Adobe Framemaker versions 2022.8 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program,

CVE-2020-9636 [HIGH] CWE-787 CVE-2020-9636: Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful expl Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVE-2026-27295 [HIGH] CWE-787 CVE-2026-27295: Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability th Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2020-3739 [HIGH] CWE-787 CVE-2020-3739: Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful expl Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVE-2020-9725 [HIGH] CWE-121 CVE-2020-9725: Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of us Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to exploit this vulnerability in that the target must open a

CVE-2022-28826 [HIGH] CWE-787 CVE-2022-28826: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-28828 [HIGH] CWE-787 CVE-2022-28828: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-28825 [HIGH] CWE-787 CVE-2022-28825: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-28821 [HIGH] CWE-787 CVE-2022-28821: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-28827 [HIGH] CWE-787 CVE-2022-28827: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-28822 [HIGH] CWE-787 CVE-2022-28822: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-28829 [HIGH] CWE-787 CVE-2022-28829: Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bo Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54281 [HIGH] CWE-416 CVE-2025-54281: Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Use After Free vulnerability Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27292 [HIGH] CWE-416 CVE-2026-27292: Adobe Framemaker versions 2022.8 and earlier are affected by a Use After Free vulnerability that cou Adobe Framemaker versions 2022.8 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27298 [HIGH] CWE-843 CVE-2026-27298: Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatibl Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27296 [HIGH] CWE-191 CVE-2026-27296: Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparoun Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27297 [HIGH] CWE-191 CVE-2026-27297: Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparoun Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.