CVE-2020-1020KEV · OVERDUE

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

High · published April 15, 2020

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.3th percentile for exploit probability.

1635
days past CISA
deadline
CVSS v3.1
8.8
EPSS
65%
Percentile
99.3
In the wild
Confirmed
What it is

🔥 A sneaky vulnerability in the Windows Adobe Type Manager Library can let attackers remotely execute code just by crafting a special font! Think of it like an unsuspecting mailroom employee accepting a package without checking the label — if the package is harmful, it can disrupt the entire office! If successfully exploited, an attacker could run any code they choose on your system, effectively taking control and potentially wreaking havoc on your data and security. This isn't just a minor hiccup; it's an open door for chaos!

Put simply

Think of it like an unsuspecting mailroom employee accepting a package without checking the label — if the package is harmful, it can disrupt the entire office! This remote code execution vulnerability arises when the Adobe Type Manager Library mishandles a specially-crafted multi-master font, allowing an attacker to execute code remotely on vulnerable systems, specifically all except Windows 10.

What to do

If successfully exploited, an attacker could run any code they choose on your system, effectively taking control and potentially wreaking havoc on your data and security. This isn't just a minor hiccup; it's an open door for chaos! To mitigate this risk, ensure your systems are updated, particularly if using versions prior to Windows 10. Regularly apply security updates and monitor for any unusual activity to bolster your defenses. You've got this! With these steps, you'll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.65037 · 99.3th percentile
Published
2020-04-15T15:13Z
KEV added
2021-11-03 · due 2022-05-03
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV — remediate by May 3
    kev
  • 15 APR 15:13Z
    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted…
    cvelistv5