CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2015-24268.8/HIGHEPSS 86.6%CISA KEV
2015-07-20

Microsoft Windows Adobe Type Manager Library (atmfd.dll) Buffer Underflow Remote Code Execution Vulnerability (CVE-2015-2426)

[Affected Scope] Windows Vista SP2, 7 SP1, 8, 8.1, RT, and Windows Server 2008/2012

[Impact] Remote attackers can execute arbitrary code with kernel-level privileges by tricking users into rendering a specially crafted OpenType font

[Mitigation] Apply the official Microsoft MS15-078 security patch immediately, or disable the Adobe Type Manager Font Driver (atmfd.dll) as a temporary workaround

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse