CVE-2026-27292 is a Use After Free vulnerability in Adobe Framemaker (versions 2022.8 and earlier) that may lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction, as a victim must open a crafted malicious file to trigger the issue. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Adobe as of the publication date.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Since user interaction is required, the risk is somewhat mitigated by the need for a victim to open a malicious file. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. Monitor Adobe's security advisories for updates regarding patches or mitigations.