Microsoft Windows Remote Code Execution Vulnerability

🗓️ 06 Oct 2025 00:00:00Reported by CISAType

Windows kernel TrueType font parsing vulnerability allows remote code execution via crafted font data in documents or web pages.

Reporter	Title	Published	Views	Family All 43
BDU FSTEC	The vulnerability of the TrueType driver Win32k.sys in the Windows operating system allows a hacker to execute arbitrary code.	4 Jun 202100:00	–	bdu_fstec
Circl	CVE-2011-3402	29 May 201815:50	–	circl
CISA	CISA Adds Seven Known Exploited Vulnerabilities to Catalog	6 Oct 202512:00	–	cisa
Check Point Advisories	Microsoft Windows TrueType Font File Parsing Code Execution (CVE-2011-3402)	6 Nov 201100:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows TrueType Font File Parsing Code Execution - Ver2 (CVE-2011-3402)	18 May 201500:00	–	checkpoint_advisories
CVE	CVE-2011-3402	4 Nov 201121:00	–	cve
Cvelist	CVE-2011-3402	4 Nov 201121:00	–	cvelist
Microsoft KB	MS11-087: Vulnerability in Windows kernel-mode drivers could allow remote code execution: December 13, 2011	13 Dec 201100:00	–	mskb
Microsoft KB	MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight: May 8, 2012	8 May 201200:00	–	mskb
Kaspersky	KLA10544 Code execution vulnerabilities in Microsoft Silverlight	8 May 201200:00	–	kaspersky

06 Oct 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18.8

CVSS 29.3

EPSS0.78285

SSVC