Microsoft · Windows
CVE-2020-0938
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
Cos'è
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.
CISA: Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 3 maggio 2022
Altre falle sfruttate di Microsoft
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 13 ott 2026 | Command Injection | Windows | Alta 8,8 | 9,8% |
| 8 set 2026 | Link Following | Windows | Alta 7,8 | 0,4% |
| 8 set 2026 | Heap-Based Buffer Overflow | Windows | Alta 7,8 | 0,4% |
| 20 mag 2026 | Buffer Overflow | Windows | Critica 9,8 | 99% |
| 28 apr 2026 | Protection Mechanism Failure | Windows | Media 4,3 | 71% |
| 13 apr 2026 | Out-of-Bounds Read | Windows | Alta 7,8 | 12% |
| 13 apr 2026 | Link Following | Windows | Alta 7,8 | 4,6% |
| 17 feb 2026 | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | Alta 8,8 | 77% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.