CVE-2026-27292

CVE-2026-27292 is a Use After Free vulnerability affecting Adobe Framemaker versions 2022.8 and earlier that could enable arbitrary code execution within the context of the current user. This memory safety flaw requires user interaction, specifically the opening of a malicious file, to be exploited. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, reflecting low attack complexity and no privilege requirements, combined with high potential impact across confidentiality, integrity, and availability. The local attack vector limits exposure to users with file system access, though the requirement for user interaction to open a malicious file is a significant exploitation barrier. Current exploitation status indicates minimal real-world activity, with no known exploit code publicly available and the vulnerability not listed on the CISA Known Exploited Vulnerabilities catalog. The EPSS score of 0.00035 suggests very low probability of exploitation in the wild, and the inactive status on threat lists indicates limited community attention at this time.