Adobe FrameMaker Arbitrary Code Execution Vulnerabilities

CERT-Bund published security advisory WID-SEC-2026-1108 disclosing multiple vulnerabilities in Adobe FrameMaker affecting Windows systems. Affected versions include Adobe FrameMaker prior to version 2026 and prior to version 2022 Update 9. The vulnerabilities have a CVSS Base Score of 8.6 (high) and a Temporal Score of 7.5 (high), indicating significant risk. A local attacker could exploit these flaws to execute arbitrary code or disclose confidential information.

Organizations using Adobe FrameMaker on Windows should update to a patched version as soon as possible. The advisory confirms that mitigation measures are available. Failure to apply updates may expose systems to code execution attacks and information disclosure. Security teams should assess their FrameMaker installations and prioritize patching based on the high CVSS severity rating.