{"id":"CVE-2020-1020","kind":"vulnerability","aliases":["CVE-2020-1020"],"related":[],"title":"Microsoft Windows: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","description":"Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Windows Adobe Type Manager Library mishandles specially crafted multi-master Type 1 PostScript fonts, allowing remote code execution on most Windows versions. On Windows 10 the attacker lands in an AppContainer sandbox with limited privileges instead.","severity":"high","cvss":8.8,"epss":0.65037,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Microsoft Windows","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","windows"],"not_affected_if":["patched-systems"],"how_to_check":null,"fix":"Apply the Microsoft security update for CVE-2020-1020 per vendor instructions (CISA KEV required action).","status":"open","published_at":"2020-04-15T15:15:20+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:43:22+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.75,"triage":{"at":"2026-10-23T21:43:22Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft security update for CVE-2020-1020 per vendor instructions (CISA KEV required action).","reach":"unknown","impact":"high","summary":"Windows Adobe Type Manager Library mishandles specially crafted multi-master Type 1 PostScript fonts, allowing remote code execution on most Windows versions. On Windows 10 the attacker lands in an AppContainer sandbox with limited privileges instead.","category":"infrastructure","who_cares":["windows"],"confidence":0.75,"needs_auth":"no","worst_case":"Attacker runs code on the Windows machine via a crafted font file.","analyst_note":"Sources do not list affected or fixed Windows builds or a check method; pull the Microsoft advisory for CVE-2020-1020 to confirm affected builds and the KB numbers.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-systems"],"user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000474,"input_tokens":2926,"output_tokens":362,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Sources do not list affected or fixed Windows builds or a check method; pull the Microsoft advisory for CVE-2020-1020 to confirm affected builds and the KB numbers.","search":"'-1020':15A,18A '-2020':14A,17A '1':36B,81C '10':49B,95C,100C 'action':123C 'adob':5A,25B,63C,79C 'allow':39B,85C 'appcontain':55B,113C 'appli':124C 'attack':51B,102C 'capabl':120C 'cisa':121C 'code':10A,41B,88C,110C 'contain':67C 'context':115C 'could':108C 'craft':31B,74C 'cve':13A,16A 'except':93C 'execut':11A,42B,89C,109C 'exploit':21B,105C 'font':6A,38B,64C,78C 'format':83C 'handl':72C 'infrastructur':22B 'instead':60B 'instruct':128C 'land':52B 'librari':8A,28B,66C 'limit':58B,117C 'manag':7A,27B,65C 'master':34B,77C 'microsoft':1A,3A,19A,61C 'mishandl':29B 'multi':33B,76C 'multi-mast':32B,75C 'per':126C 'postscript':37B,82C 'privileg':59B,118C 'remot':9A,40B,87C 'requir':122C 'run':98C 'sandbox':56B,114C 'special':30B,73C 'success':104C 'system':92C,97C 'type':26B,35B,80C 'unspecifi':69C 'updat':125C 'vendor':127C 'version':46B 'vulner':12A,70C,107C 'window':2A,4A,23B,24B,45B,48B,62C,94C,99C 'windows':20A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-04-15T15:15:20+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-1020","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T10:39:08+00:00","note":null},{"source":"epss","external_id":"CVE-2020-1020","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1020","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-1020","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1020","severity":null,"published_at":"2020-04-15T15:15:20+00:00","modified_at":"2026-06-17T03:00:14+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}