CVE-2022-28828
Published on: Not Yet Published
Last Modified on: 05/13/2022 03:31:00 PM UTC
Certain versions of FrameMaker from Adobe contain the following vulnerability:
Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2022-28828 has been assigned by
[email protected] to track the vulnerability - currently rated as HIGH severity. - Affected Vendor/Software: Adobe - FrameMaker version <= 2019u8
- Affected Vendor/Software: Adobe - FrameMaker version <= 2020u4
- Affected Vendor/Software: Adobe - FrameMaker version <= None
- Affected Vendor/Software: Adobe - FrameMaker version <= None
CVSS3 Score: 7.8 - HIGH
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| LOCAL | LOW | NONE | REQUIRED |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | HIGH | HIGH | HIGH |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| Adobe Security Bulletin | helpx.adobe.com text/html |
MISC helpx.adobe.com/security/products/framemaker/apsb22-27.html |
Related QID Numbers
- 376589 Adobe Framemaker Multiple Vulnerabilities (APSB22-27)
Known Affected Software
| Vendor | Product | Version |
|---|---|---|
| Adobe | FrameMaker | <= 2019u8 |
| Adobe | FrameMaker | <= 2020u4 |
| Adobe | FrameMaker | <= None |
| Adobe | FrameMaker | <= None |
No vendor comments have been submitted for this CVE
Social Mentions
| Source | Title | Posted (UTC) |
|---|---|---|
 /r/k12cybersecurity |
MS-ISAC CYBERSECURITY ADVISORY - Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution - PATCH: NOW | 2022-05-11 16:59:39 |