Microsoft · Windows
CVE-2020-0938
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
O que é
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.
CISA: Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 3 de maio de 2022
Mais falhas exploradas de Microsoft
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 13 de out. de 2026 | Command Injection | Windows | Alto 8,8 | 9,8% |
| 8 de set. de 2026 | Link Following | Windows | Alto 7,8 | 0,4% |
| 8 de set. de 2026 | Heap-Based Buffer Overflow | Windows | Alto 7,8 | 0,4% |
| 20 de mai. de 2026 | Buffer Overflow | Windows | Crítica 9,8 | 99% |
| 28 de abr. de 2026 | Protection Mechanism Failure | Windows | Média 4,3 | 71% |
| 13 de abr. de 2026 | Out-of-Bounds Read | Windows | Alto 7,8 | 12% |
| 13 de abr. de 2026 | Link Following | Windows | Alto 7,8 | 4,6% |
| 17 de fev. de 2026 | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | Alto 8,8 | 77% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.