CVEvulnerability

CVE-2020-0938

7.8 HIGH Known exploited Published 2020-04-15 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability — Microsoft Windows

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.

Added to KEV
2021-11-03
Remediation due
2022-05-03
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-0938
Status
Analyzed
Published
2020-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-787

Description

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.

Affected configurations

• microsoft windows 10 1507 • microsoft windows 10 1607 • microsoft windows 10 1709 • microsoft windows 10 1803 • microsoft windows 10 1809 • microsoft windows 10 1903 • microsoft windows 10 1909 • microsoft windows 7 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 1803 • microsoft windows server 1903 • microsoft windows server 1909 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows server 2019

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References