vulnerability

Adobe FrameMaker: CVE-2023-21584: Use After Free (CWE-416)

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:N)
Published
Feb 17, 2023
Added
Nov 27, 2025
Modified
Nov 27, 2025

Description

FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Solution

adobe-framemaker-fixed-issues-2020-fixed-issues
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.