Adobe Framemaker vulnerabilities

118 CVEs affecting Adobe Framemaker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-27301, published 2026-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-21056, published 2021-03-12. High severity, CVSS 7.8. EPSS: 22.6% chance of exploitation in the next 30 days. Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability…
CVE-2020-3735, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.2% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3731, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.2% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3740, published 2020-02-13. Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15974, published 2018-10-17. High severity, CVSS 7.8. EPSS: 4.6% chance of exploitation in the next 30 days. Adobe Framemaker versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVE-2020-3734, published 2020-02-13. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-9635, published 2020-06-12. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-9634, published 2020-06-12. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3736, published 2020-02-13. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3733, published 2020-02-13. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Latest

CVE-2026-27301, published 2026-04-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose…
CVE-2026-27300, published 2026-04-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to…
CVE-2026-27299, published 2026-04-14. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to…
CVE-2026-27298, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the…
CVE-2026-27297, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2026-27296, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2026-27295, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-27294, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory…
CVE-2026-27293, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE-2026-27292, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Framemaker versions 2022.8 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…