CVE-2024-30290: 
Adobe Framemaker vulnerability analysis and mitigation

Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability identified as CVE-2024-30290. The vulnerability was disclosed on May 14, 2024, affecting Adobe Framemaker installations on Windows platforms (Adobe Advisory).

The vulnerability is classified as an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. Depending on the user's privileges, an attacker could potentially install programs, view, change, or delete data, or create new accounts with full user rights (CIS Advisory).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Framemaker. The updates are available for Adobe Framemaker 2020 Release Update 5 and earlier, and Adobe Framemaker 2022 Release Update 3 and earlier versions on Windows (Adobe Advisory).