Actively exploited in the wild
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-0938
HighCVSS 7.8KEVSummary
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely.
Risk Assessment
The vulnerability may allow remote code execution, potentially leading to full system compromise and serious security breaches.
Recommendation
Apply the security updates provided by Microsoft for the Adobe Type Manager Library.
Other vulnerabilities in Windows Adobe Type Manager Library
Original NVD description (English source)
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.