Adobe FrameMaker Improper Input Validation Vulnerability Allowing Arbitrary File System Read

A vulnerability exists in Adobe FrameMaker versions 2022.8 and earlier, related to improper input validation. This issue could lead to arbitrary file system read, allowing an attacker to access sensitive files or data on the system. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files or data on the system.

Remediation

Users are advised to update to Adobe FrameMaker 2026 or Adobe FrameMaker 2022 Update 9. Instructions for downloading these versions are available in the Adobe security bulletin APSB26-36.