CVE-2020-0687: Critical severity windows 10 vulnerability

Published Apr 15, 2020

Updated

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.

Affected Software

20 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0687

Event History

Apr 15, 2020

CVE Published

via MITRE·03:12 PM

Data Sourced

via MITRE·03:12 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0687?

CVE-2020-0687 has a severity rating of critical, indicating it could allow an attacker to run arbitrary code on affected systems.

How do I fix CVE-2020-0687?

To fix CVE-2020-0687, apply the security updates as provided by Microsoft for your Windows version.

Which software is affected by CVE-2020-0687?

CVE-2020-0687 affects several versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server editions.

Can CVE-2020-0687 be exploited remotely?

Yes, CVE-2020-0687 can be exploited remotely through the exploitation of specially crafted embedded fonts.

What are the potential impacts of CVE-2020-0687?

The potential impact of CVE-2020-0687 includes unauthorized access and control over an affected system, which can lead to data breaches.