9.3

CVE-2020-1408

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 Version - HwPlatform x64
Microsoft ≫ Windows 10 Version - HwPlatform x86
Microsoft ≫ Windows 10 Version 1607 HwPlatform x64
Microsoft ≫ Windows 10 Version 1607 HwPlatform x86
Microsoft ≫ Windows 10 Version 1709 HwPlatform arm64
Microsoft ≫ Windows 10 Version 1709 HwPlatform x64
Microsoft ≫ Windows 10 Version 1709 HwPlatform x86
Microsoft ≫ Windows 10 Version 1803 HwPlatform arm64
Microsoft ≫ Windows 10 Version 1803 HwPlatform x64
Microsoft ≫ Windows 10 Version 1803 HwPlatform x86
Microsoft ≫ Windows 10 Version 1809 HwPlatform arm64
Microsoft ≫ Windows 10 Version 1809 HwPlatform x64
Microsoft ≫ Windows 10 Version 1809 HwPlatform x86
Microsoft ≫ Windows 10 Version 1903 HwPlatform arm64
Microsoft ≫ Windows 10 Version 1903 HwPlatform x64
Microsoft ≫ Windows 10 Version 1903 HwPlatform x86
Microsoft ≫ Windows 10 Version 1909 HwPlatform arm64
Microsoft ≫ Windows 10 Version 1909 HwPlatform x64
Microsoft ≫ Windows 10 Version 1909 HwPlatform x86
Microsoft ≫ Windows 10 Version 2004 HwPlatform arm64
Microsoft ≫ Windows 10 Version 2004 HwPlatform x64
Microsoft ≫ Windows 10 Version 2004 HwPlatform x86
Microsoft ≫ Windows 7 Version - Update sp1 HwPlatform x64
Microsoft ≫ Windows 7 Version - Update sp1 HwPlatform x86
Microsoft ≫ Windows 8.1 Version - HwPlatform x64
Microsoft ≫ Windows 8.1 Version - HwPlatform x86
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86
Microsoft ≫ Windows Server 2016 Version 1903
Microsoft ≫ Windows Server 2016 Version 1909
Microsoft ≫ Windows Server 2016 Version 2004
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.66% 0.92
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1408
Patch
Vendor Advisory