CVE-2026-27297

CVE-2026-27297 is an integer underflow vulnerability affecting Adobe Framemaker versions 2022.8 and earlier that could allow attackers to execute arbitrary code within the context of the current user. The flaw requires user interaction, specifically the opening of a malicious file, to be exploited. The vulnerability carries a CVSS score of 7.8 (HIGH) with a local attack vector, low complexity, and no privilege requirements. Successful exploitation grants the attacker high-level access to confidentiality, integrity, and availability of the affected system. The EPSS score of 0.00027 indicates relatively low real-world exploitation probability compared to the broader CVE landscape. There is currently no evidence of active exploitation, as the vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog and shows no activity on exploit tracking lists. Community attention remains minimal, and the FAUCET risk score of 49.0 reflects moderate concern. Organizations should prioritize patching as part of regular maintenance cycles, though this does not present an urgent threat requiring emergency response.