CVE-2020-0938CISA KEVEPSS p99.3%

CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft / Windows

Description

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.

Scoring

EPSS69.17% probability of exploitation · percentile 99.3% · 2026-06-17T12:03:21Z

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerabilitykev-cve-2020-09380%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
CVE
Microsoft Windows Open Type Font Remote Code Execution Vulnerability
CVE
Microsoft Windows Remote Code Execution Vulnerability
CVE
Microsoft GDI Remote Code Execution Vulnerability
CVE
Adobe Acrobat Use-After-Free Vulnerability
CVE
Microsoft ATM Font Driver Privilege Escalation Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.