CVE-2026-27301 is a heap-based buffer overflow vulnerability (CWE-122) affecting Adobe Framemaker versions 2022.8 and earlier. This vulnerability allows an attacker to cause memory exposure by exploiting the overflow, potentially disclosing sensitive information. Exploitation requires the victim to open a crafted malicious file, involving user interaction. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, and user interaction needed. No official patch or remediation level has been published by Adobe as of the data provided.

Successful exploitation can lead to disclosure of sensitive information stored in the application's memory. There is no indication of impact on integrity or availability. Exploitation requires user interaction, limiting the attack scope. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Adobe advisory for current remediation guidance. Until a patch is available, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.