{"id":"CVE-2020-0938","kind":"vulnerability","aliases":["CVE-2020-0938"],"related":[],"title":"Microsoft Windows: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","description":"Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Windows Adobe Font Manager Library mishandles specially crafted multi-master Adobe Type 1 PostScript fonts, allowing remote code execution on Windows systems other than Windows 10. On Windows 10 the attacker gets code execution only inside a limited AppContainer sandbox.","severity":"high","cvss":7.8,"epss":0.6895,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Microsoft Windows","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","microsoft-windows","windows"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Microsoft security update for CVE-2020-0938 per vendor instructions (CISA KEV required action). Specific KB numbers are not stated in the sources.","status":"open","published_at":"2020-04-15T15:15:16+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:39:25+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-23T21:39:25Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft security update for CVE-2020-0938 per vendor instructions (CISA KEV required action). Specific KB numbers are not stated in the sources.","reach":"unknown","impact":"high","summary":"Windows Adobe Font Manager Library mishandles specially crafted multi-master Adobe Type 1 PostScript fonts, allowing remote code execution on Windows systems other than Windows 10. On Windows 10 the attacker gets code execution only inside a limited AppContainer sandbox.","category":"infrastructure","who_cares":["windows","microsoft-windows"],"confidence":0.8,"needs_auth":"unknown","worst_case":"Attacker runs code on the Windows machine, sandboxed only on Windows 10.","analyst_note":"Confirm the patched Windows update KB numbers and whether opening a malicious font file or remote delivery triggers it, from Microsoft's CVE-2020-0938 advisory.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000494,"input_tokens":2926,"output_tokens":403,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Confirm the patched Windows update KB numbers and whether opening a malicious font file or remote delivery triggers it, from Microsoft's CVE-2020-0938 advisory.","search":"'-0938':15A,18A '-2020':14A,17A '1':40B,88C '10':53B,56B,102C,107C 'action':130C 'adob':5A,28B,38B,70C,86C 'allow':43B,92C 'appcontain':66B,120C 'appli':131C 'attack':58B,109C 'capabl':127C 'cisa':128C 'code':10A,45B,60B,95C,117C 'contain':74C 'context':122C 'could':115C 'craft':34B,81C 'cve':13A,16A 'except':100C 'execut':11A,46B,61B,96C,116C 'exploit':21B,112C 'font':6A,29B,42B,71C,85C 'format':90C 'get':59B 'handl':79C 'infrastructur':22B 'insid':63B 'instruct':135C 'librari':8A,31B,73C 'limit':65B,124C 'manag':7A,30B,72C 'master':37B,84C 'microsoft':1A,3A,19A,24B,68C 'microsoft-window':23B 'mishandl':32B 'multi':36B,83C 'multi-mast':35B,82C 'per':133C 'postscript':41B,89C 'privileg':125C 'remot':9A,44B,94C 'requir':129C 'run':105C 'sandbox':67B,121C 'special':33B,80C 'success':111C 'system':49B,99C,104C 'type':39B,87C 'unspecifi':76C 'updat':132C 'vendor':134C 'vulner':12A,77C,114C 'window':2A,4A,25B,26B,27B,48B,52B,55B,69C,101C,106C 'windows':20A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-04-15T15:15:16+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-0938","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T17:39:59+00:00","note":null},{"source":"epss","external_id":"CVE-2020-0938","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-0938","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-0938","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0938","severity":null,"published_at":"2020-04-15T15:15:16+00:00","modified_at":"2026-06-17T02:47:01+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}