PT-2026-32940

CVE-2026-27290

·

Published

2026-04-14

·

Updated

2026-04-15

Description by

CVSS 3.1
8.6
High
MetricsAV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions 2022.8 and earlier
Description An Untrusted Search Path issue exists where the application uses a search path to locate critical resources such as programs. An attacker could modify this search path to point to a malicious program, which the application would then execute, potentially allowing arbitrary code execution in the context of the current user. This exploitation does not require user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾