CVE-2026-27301 is a heap-based buffer overflow vulnerability (CWE-122) affecting Adobe Framemaker 2022.8 and earlier. This flaw could be exploited by an attacker who convinces a user to open a crafted malicious file, resulting in disclosure of sensitive memory contents. The CVSS 3.1 base score is 5.5, reflecting a medium severity with attack vector local, low attack complexity, no privileges required, user interaction needed, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No official patch or remediation level has been published as of the data provided.

Successful exploitation can lead to disclosure of sensitive information from the application's memory. There is no indication of integrity or availability impact. Exploitation requires user interaction, limiting the attack vector to scenarios where a victim opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources to avoid triggering this vulnerability.