CVE-2026-27300 is an Access of Uninitialized Pointer vulnerability in Adobe Framemaker (versions 2022.8 and earlier). This flaw allows an attacker to cause memory exposure by leveraging uninitialized pointers within the application. Successful exploitation requires the victim to open a crafted malicious file, which could disclose sensitive information. The vulnerability has a medium severity rating with a CVSS 3.1 base score of 5.5, reflecting local attack vector, low complexity, no privileges required, user interaction needed, and high confidentiality impact. No official patch or remediation level has been provided by Adobe as of the publication date.

The vulnerability could lead to disclosure of sensitive information from the affected system's memory. It does not impact integrity or availability. Exploitation requires user interaction, limiting the attack vector to scenarios where a user opens a malicious file. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. No official mitigation or temporary fix has been provided by Adobe at this time.