CVE-2021-39831: adobe framemaker Out-of-bounds Write
Vulnerability summary
CVE-2021-39831 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in adobe framemaker. EPSS estimates a 2.17% chance of exploitation in the next 30 days, higher than 81.9% of scored vulnerabilities.
Timeline
- 29-09-2021PublishedVulnerability first disclosed.
- 23-04-2025Last modifiedVulnerability information updated.
Description
Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.17%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.17% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Adobe1 product
- framemaker≥ unspecified, ≤ 2020.2 | ≥ unspecified, ≤ 2019.8 | ≥ unspecified, ≤ None | ≤ 2019.0.8 | ≥ 2020.0.1, ≤ 2020.0.2
1 vendor · 1 product