CVE-2022-28830

Adobe FrameMaker (versions 2029u8 and earlier and 2020u4 and earlier) is affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR; exploitation requires a user to open a malicious file. The issue is addressed in the APSB22-27 security update (fixes for multiple C...

CVE-2023-21584

Adobe FrameMaker is affected by a Use-After-Free vulnerability (CVE-2023-21584) in FrameMaker 2020 Update 4 and earlier, and FrameMaker 2022 and earlier. The flaw could disclose sensitive memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediati...

CVE-2022-34264

CVE-2022-34264 affects Adobe FrameMaker 2019 Update 8 and earlier, and 2020 Update 4 and earlier. The vulnerability is an out-of-bounds read that can disclose memory and could bypass ASLR; exploitation requires user interaction (victim opens a malicious file). Connected sources confirm the issue ...

CVE-2024-30283

Adobe FrameMaker (versions 2020.5, 2022.3 and earlier) is affected by an out-of-bounds read vulnerability in ICO file parsing that could disclose memory contents and bypass ASLR. Impact is memory disclosure with no integrity/availability impact stated; exploitation requires user interaction (vict...

CVE-2024-30287

Adobe FrameMaker 2020.5, 2022.3 and earlier are affected by an out-of-bounds read vulnerability that could disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation is available via Adobe APSB24-37 updates (FrameMaker 2020 Update...

CVE-2024-30286

Adobe FrameMaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected components: DOC/File parsing in FrameMaker. CVE-2024-30286. Remedia...

CVE-2023-21620

CVE-2023-21620 affects Adobe FrameMaker 2020 Update 4 and earlier, and 2022 and earlier. It is an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources indicate fixes in APSB23-06, wit...

CVE-2025-30303

Summary: CVE-2025-30303 affects Adobe FrameMaker up to 2020.8 and 2022.6 and earlier, due to an out-of-bounds read that can disclose memory. Impact is memory disclosure; mitigations like ASLR may be bypassed. Exploitation requires user interaction (victim opens a malicious file). Connected source...

CVE-2025-30300

Adobe FrameMaker is affected for versions 2020.8, 2022.6 and earlier by a NULL Pointer Dereference that can crash the application and cause a denial-of-service. Exploitation requires the user to open a malicious file. Mitigation provided by Adobe APSB25-33, which recommends updating to a fixed ve...

CVE-2025-30302

CVE-2025-30302 affects Adobe FrameMaker: vulnerable in FrameMaker versions 2020.8, 2022.6 and earlier due to an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Several connected sources confirm affected versions ...

CVE-2025-30301

Adobe FrameMaker is affected by a NULL Pointer Dereference in versions 2020.8, 2022.6 and earlier, leading to potential denial-of-service when a user opens a crafted file. The issue is triggered by user interaction (opening a malicious file). Mitigation: Adobe released APSB25-33 with fixes for Fr...

CVE-2025-47120

Summary: CVE-2025-47120 affects Adobe FrameMaker 2020.8, 2022.6 and earlier. The issue is a stack-based buffer overflow in FrameMaker that can disclose memory contents. Exploitation requires user interaction (the victim must open a malicious file). What’s known from connected sources: The vulnera...

CVE-2025-47119

Adobe FrameMaker (versions 2020.8, 2022.6 and earlier) contains a NULL Pointer Dereference vulnerability that can crash the application and cause a denial of service. The issue requires user interaction (victim opens a malicious file) and is described across multiple sources as a vulnerability in...

CVE-2026-27301

Adobe Framemaker 2022.8 and earlier is affected by a heap-based buffer overflow that can disclose memory contents. Exploitation requires user interaction: the victim must open a malicious file. CVSS v3.1 indicates LOCAL attack vector, LOW attack complexity, NONE privileges, and UI:R with CONFIDEN...

CVE-2026-27300

CVE-2026-27300 affects Adobe FrameMaker 2022.8 and earlier. The issue is an Access of Uninitialized Pointer that could lead to memory exposure. An attacker could disclose sensitive information, with exploitation requiring the victim to open a malicious file (user interaction). The provided connec...

CVE-2025-54233

Adobe FrameMaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read (CWE-125) vulnerability that can disclose memory. Exploitation requires user interaction (open a malicious file). Remediation: update to versions later than 2022.6 and later than 2020.8 (per PT-2025-32952; ...