VULNERABILITY INTELLIGENCE

CVE-2020-1020

CVSS score8.8 HIGH

EPSS probability65.04%

CISA KEVKnown exploited vulnerability

Published2020-04-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Vendor / product: Microsoft / Windows

Description

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.

Weakness classification

nvd@nist.gov: CWE-787
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-787

Primary references

secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource