CVE-2026-27295 is an out-of-bounds write vulnerability (CWE-787) affecting Adobe Framemaker versions 2022.8 and earlier. This vulnerability allows an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector requires local user interaction (opening a file), with low attack complexity and no privileges required prior to exploitation.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the user's environment. Confidentiality, integrity, and availability impacts are all rated high. However, exploitation requires user interaction, limiting remote automatic exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. No official remediation or temporary fix has been documented at this time.