Adobe Framemaker 2026 vulnerabilities

10 CVEs affecting Adobe Framemaker 2026, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-106625, published 2026-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-104342, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
CVE-2026-103856, published 2026-10-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information.…
CVE-2026-104344, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-104340, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-106625, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-104341, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-103967, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-103857, published 2026-10-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information.…
CVE-2026-103966, published 2026-10-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-104343, published 2026-10-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application,…