CVE-2026-103856: Adobe FrameMaker 2026 0 through 18.0.0.206; +1 more affected products

Affected technology

Adobe FrameMaker 2026 · 0 through 18.0.0.206
Adobe

Adobe FrameMaker 2022 · 0 through 17.0.9.866
Adobe

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

An attacker could leverage this vulnerability to disclose sensitive information. Vendor/CNA’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none.