CVE-2026-27296 is an integer underflow (wrap or wraparound) vulnerability in Adobe Framemaker versions 2022.8 and earlier. This flaw allows an attacker to execute arbitrary code in the context of the current user if the user opens a malicious file. The vulnerability requires user interaction and has a CVSS v3.1 base score of 7.8, indicating high severity. No official patch or remediation level has been published yet, and there are no known exploits in the wild at this time.

Successful exploitation of this vulnerability could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Exploitation requires that the victim open a malicious file, so social engineering or phishing may be involved. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider restricting usage of Adobe Framemaker to trusted environments only.