CVE-2020-0938: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
First published: Wed Apr 15 2020(Updated: )
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows 10 | ||
| Windows 10 | =1607 | |
| Windows 10 | =1709 | |
| Windows 10 | =1803 | |
| Windows 10 | =1809 | |
| Windows 10 | =1903 | |
| Windows 10 | =1909 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2016 | =1903 | |
| Microsoft Windows Server 2016 | =1909 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows Operating System | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server 1903 | ||
| Microsoft Windows Server 1909 | ||
| =sp1 | ||
| =sp2 | ||
| =r2-sp1 | ||
| =r2-sp1 | ||
| =r2 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-0938?
CVE-2020-0938 has a critical severity rating, allowing for remote code execution.
How do I fix CVE-2020-0938?
To fix CVE-2020-0938, apply the security updates provided by Microsoft for affected Windows versions.
Which versions of Windows are affected by CVE-2020-0938?
CVE-2020-0938 affects multiple versions of Windows, including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions.
What could an attacker do if they exploit CVE-2020-0938?
An attacker who exploits CVE-2020-0938 can execute arbitrary code on the victim's machine with elevated privileges.
Is CVE-2020-0938 specific to a certain type of file?
Yes, CVE-2020-0938 specifically relates to vulnerabilities in the handling of specially-crafted multi-master fonts.
- agent/type
- agent/description
- agent/title
- agent/remedy
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/references
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/softwarecombine
- agent/tags
- collector/nvd-cve
- vendor/microsoft
- canonical/windows 10
- version/windows 10/1607
- version/windows 10/1709
- version/windows 10/1803
- version/windows 10/1809
- version/windows 10/1903
- version/windows 10/1909
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1803
- version/microsoft windows server 2016/1903
- version/microsoft windows server 2016/1909
- canonical/microsoft windows server 2019
- canonical/microsoft windows operating system
- canonical/microsoft windows 10
- canonical/microsoft windows server 1903
- canonical/microsoft windows server 1909