CVEvulnerability
CVE-2018-0788
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-01-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of Privilege Vulnerability".
Affected configurations
• microsoft windows 7
• microsoft windows 8.1
• microsoft windows server 2008
• microsoft windows server 2008 r2
• microsoft windows server 2012
• microsoft windows server 2012 r2
References
- http://www.securityfocus.com/bid/102364 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040092 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0788 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/102364 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040092 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0788 Patch, Vendor Advisory