In-the-Wild Series: Windows Exploits

🗓️ 12 Jan 2021 00:00:00Reported by GoogleProjectZeroType

This document details in-the-wild exploits targeting Windows vulnerabilities, specifically in the area of font handling on Windows ≤ 8.1

Reporter	Title	Published	Views	Family All 109
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	10 Jun 202106:23	–	githubexploit
ATTACKERKB	ADV200006 - Type 1 Font Parsing Remote Code Execution Vulnerability in Windows	15 Apr 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-1027	15 Apr 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-1020	15 Apr 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-15020	31 Aug 202013:15	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
BDU FSTEC	The vulnerability of the Windows Adobe Type Manager library on Windows operating systems allows a hacker to execute arbitrary code.	15 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Adobe Type Manager Library on Windows operating systems allows a hacker to execute arbitrary code.	21 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.	21 May 202000:00	–	bdu_fstec
Circl	CVE-2020-0938	14 Apr 202020:39	–	circl

12 Jan 2021 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS 27.2

CVSS 3.18.8

EPSS0.69166