Microsoft · Windows
CVE-2020-1020
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
무엇인가
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.
CISA: Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 5월 3일
Microsoft의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 13. | Command Injection | Windows | 높음 8.8 | 9.8% |
| 2026. 9. 8. | Link Following | Windows | 높음 7.8 | 0.4% |
| 2026. 9. 8. | Heap-Based Buffer Overflow | Windows | 높음 7.8 | 0.4% |
| 2026. 5. 20. | Buffer Overflow | Windows | 치명적 9.8 | 99% |
| 2026. 4. 28. | Protection Mechanism Failure | Windows | 보통 4.3 | 71% |
| 2026. 4. 13. | Out-of-Bounds Read | Windows | 높음 7.8 | 12% |
| 2026. 4. 13. | Link Following | Windows | 높음 7.8 | 4.6% |
| 2026. 2. 17. | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | 높음 8.8 | 77% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.