Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-1020
HistoryApr 15, 2020 - 3:15 p.m.

CVE-2020-1020

2020-04-1515:15:00
CWE-787
[email protected]
web.nvd.nist.gov
1145
In Wild
3
cve-2020-1020
microsoft windows
remote code execution
adobe type manager library
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.913 High

EPSS

Percentile

98.8%

JSON

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka ‘Adobe Font Manager Library Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2020-0938.

VendorProductVersionCPE
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 431

Social References

More

Related

attackerkb 2
prion 2
cve 1
githubexploit 2
googleprojectzero 2
checkpoint_advisories 2
cert 1
mscve 3
cisa_kev 2
threatpost 2
openvas 9
krebs 1
thn 1
qualysblog 2
mskb 14
nessus 10
kaspersky 2
avleonov 1
attackerkb
attackerkb
ADV200006 - Type 1 Font Parsing Remote Code Execution Vulnerability in Windows
2020-04-15 00:00:00
CVE-2020-1020
2020-04-15 00:00:00
prion
prion
Remote code execution
2020-04-15 15:15:00
Remote code execution
2020-04-15 15:15:00
cve
cve
CVE-2020-0938
2020-04-15 15:15:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Microsoft
2021-06-10 06:23:59
Exploit for Out-of-bounds Write in Microsoft
2021-08-10 03:10:39
googleprojectzero
googleprojectzero
In-the-Wild Series: Windows Exploits
2021-01-12 00:00:00
Introducing the In-the-Wild Series
2021-01-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Font Manager Library Remote Code Execution Vulnerability (CVE-2020-1020)
2020-04-14 00:00:00
Microsoft OpenType Font Parsing Remote Code Execution (CVE-2020-0938)
2020-04-14 00:00:00
cert
cert
Microsoft Windows Type 1 font parsing remote code execution vulnerabilities
2020-03-23 00:00:00
mscve
mscve
Type 1 Font Parsing Remote Code Execution Vulnerability
2020-03-23 07:00:00
Adobe Font Manager Library Remote Code Execution Vulnerability
2020-04-14 07:00:00
Adobe Font Manager Library Remote Code Execution Vulnerability
2020-04-14 07:00:00
cisa_kev
cisa_kev
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
2021-11-03 00:00:00
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
2021-11-03 00:00:00
threatpost
threatpost
Sophisticated Hacks Against Android, Windows Reveal Zero-Day Trove
2021-01-13 16:57:39
April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit
2020-04-14 19:45:49
openvas
openvas
WordPress Elementor Page Builder Plugin <= 2.9.13 XSS Vulnerability
2020-09-03 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4550964)
2020-04-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4550961)
2020-04-15 00:00:00
krebs
krebs
Microsoft Patch Tuesday, April 2020 Edition
2020-04-14 22:24:10
thn
thn
Microsoft Issues Patches for 3 Bugs Exploited as Zero-Day in the Wild
2020-04-14 18:24:00
qualysblog
qualysblog
April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion
2020-04-14 18:34:04
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
mskb
mskb
April 14, 2020—KB4550957 (Security-only update)
2020-04-14 07:00:00
April 14, 2020—KB4550965 (Security-only update)
2020-04-14 07:00:00
April 14, 2020—KB4550971 (Security-only update)
2020-04-14 07:00:00
nessus
nessus
KB4550957: Windows Server 2008 April 2020 Security Update
2020-04-14 00:00:00
KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update
2020-04-14 00:00:00
KB4550971: Windows Server 2012 April 2020 Security Update
2020-04-14 00:00:00
kaspersky
kaspersky
KLA11743 Multiple vulnerabilities in Microsoft products (ESU)
2020-04-14 00:00:00
KLA11744 Multiple vulnerabilities in Microsoft Windows
2020-04-14 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities
2020-04-26 01:24:38

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.913 High

EPSS

Percentile

98.8%

JSON
Related for CVE-2020-1020
attackerkb2prion2cve1githubexploit2googleprojectzero2checkpoint_advisories2cert1mscve3cisa_kev2threatpost2openvas9krebs1thn1qualysblog2mskb14nessus10kaspersky2avleonov1