CVE Vulnerability Advisory Database

[Affected Scope] FreeType versions 2.13.0 and below

[Impact] Heap buffer overflow during TrueType GX and variable font parsing, potentially leading to arbitrary code execution (RCE) with active in-the-wild exploitation detected

[Mitigation] Immediately upgrade FreeType to a non-vulnerable version (2.13.1 or newer)

[Affected Scope] Legacy Apple operating systems prior to iOS 14.2, macOS Catalina 10.15.7, and watchOS 7.1

[Impact] Processing a maliciously crafted font file triggers an out-of-bounds write (CWE-787), leading to arbitrary remote code execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 14.2, macOS Big Sur 11.0.1, or later)

[Affected Scope] Supported versions of Windows 7, 8.1, RT 8.1, and Windows Server 2008, 2012, 2016, 2019 (excluding Windows 10)

[Impact] An attacker can execute arbitrary code remotely on the target system by tricking a user into opening a specially crafted document or visiting a webpage containing malicious Adobe Type 1 PostScript fonts

[Mitigation] Apply the official Microsoft security patches immediately, or implement workarounds such as disabling the WebClient service and Windows Explorer Preview Pane

[Affected Scope] Windows client operating systems prior to Windows 10, and Windows Server editions

[Impact] Remote code execution with kernel-level privileges via a specially crafted Adobe Type 1 PostScript font file

[Mitigation] Apply official Microsoft security updates immediately, or implement workarounds including disabling ATMFD.dll and stopping the WebClient service

[Affected Scope] Microsoft Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10 (Gold/1511/1607), and Windows Server 2008, 2012, 2016

[Impact] Remote attackers can execute arbitrary code with kernel privileges by enticing users to visit a malicious website or open a crafted document containing malicious OpenType fonts

[Mitigation] Immediately apply the official Microsoft security patch (MS16-132) or implement the registry workaround to disable the ATMFD.dll driver

[Affected Scope] Microsoft .NET Framework, Office 2007/2010, Lync 2010/2013, and Silverlight 5 utilizing the DirectWrite library

[Impact] Remote attackers can execute arbitrary code (RCE) with the privileges of the active user by tricking the system into rendering a specially crafted TrueType font

[Mitigation] Immediately apply the official Microsoft security updates (MS15-044) and restrict the loading of untrusted fonts via system policies