PatchTheCVEframemaker vulnerabilities and fixes
Recent CVEs affecting framemaker, with upgrade or downgrade steps. 11 tracked.
framemaker has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-04-14. Highest priority: CVE-2026-27290 (score 32/100).
- CVE-2026-27301 MEDIUM 5.5 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that c
- CVE-2026-27300 MEDIUM 5.5 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability
- CVE-2026-27299 MEDIUM 6.3 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that c
- CVE-2026-27298 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type ('T
- CVE-2026-27297 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnera
- CVE-2026-27296 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnera
- CVE-2026-27295 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could r
- CVE-2026-27294 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds read vulnerability when parsing
- CVE-2026-27293 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that c
- CVE-2026-27292 HIGH 7.8 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by a Use After Free vulnerability that could result
- CVE-2026-27290 HIGH 8.6 UPGRADE Adobe Framemaker versions 2022.8 and earlier are affected by an Untrusted Search Path vulnerability that might
FAQ
How do I fix framemaker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is framemaker being exploited right now?
None of the tracked framemaker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which framemaker CVE should I patch first?
CVE-2026-27290 currently ranks highest (32/100): Adobe Framemaker versions 2022.8 and earlier are affected by an Untrusted Search Path vulnerability that might.