CVE-2020-0938KEV · OVERDUE

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

High · published April 15, 2020

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

1636
days past CISA
deadline
CVSS v3.1
7.8
EPSS
69%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 A crafty multi-master font could spell disaster for your Windows systems! An attacker could exploit this vulnerability to execute code remotely on all but Windows 10. 🔥 Think of it like an unsuspecting restaurant accepting a delivery of suspicious ingredients without checking the order — it could lead to a disastrous dish! Here, the Adobe Type Manager Library is that restaurant, blindly trusting a font that could put your entire system at risk. If an attacker successfully exploits this vulnerability, they could run malicious code remotely, allowing them to gain control over your machine. This could lead to data theft, system compromise, or even a complete system meltdown — absolutely devastating for your security! ⚠️

Put simply

Think of it like an unsuspecting restaurant accepting a delivery of suspicious ingredients without checking the order — it could lead to a disastrous dish! Here, the Adobe Type Manager Library is that restaurant, blindly trusting a font that could put your entire system at risk. This remote code execution vulnerability arises from the way the Adobe Type Manager Library processes specially-crafted multi-master fonts, enabling attackers to execute arbitrary code on affected systems, excluding Windows 10.

What to do

If an attacker successfully exploits this vulnerability, they could run malicious code remotely, allowing them to gain control over your machine. This could lead to data theft, system compromise, or even a complete system meltdown — absolutely devastating for your security! ⚠️ To protect your systems, make sure to apply the latest updates and patches from Microsoft immediately. Reinforce your defenses by auditing your installed fonts and ensuring that only trusted sources are allowed. 🔒 You've got this! Follow these steps to secure your systems, and you'll be well on your way to superhero status! 🦸

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.68950 · 99.4th percentile
Published
2020-04-15T15:12Z
KEV added
2021-11-03 · due 2022-05-03
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV — remediate by May 3
    kev
  • 15 APR 15:12Z
    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted…
    cvelistv5