CVE-2026-104341: Out-of-bounds Write (CWE-787) in Adobe Adobe FrameMaker 2026

CVE-2026-104341 is an out-of-bounds write vulnerability in Adobe FrameMaker 2026 that can lead to arbitrary code execution in the context of the current user. Successful exploitation requires that a victim opens a crafted malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system. However, exploitation requires user interaction by opening a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources and apply standard security best practices to limit exposure.