CVE-2026-27296 is an integer underflow (wrap or wraparound) vulnerability in Adobe Framemaker 2022.8 and earlier. This flaw allows an attacker to execute arbitrary code in the context of the current user if the user opens a malicious file. The vulnerability requires user interaction and has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published yet, and there are no known exploits in the wild as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's user context. The vulnerability impacts confidentiality, integrity, and availability. Exploitation requires that the victim opens a malicious file, so social engineering or tricking the user is necessary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources. No official remediation or temporary fix has been published by Adobe at this time.