CVE-2020-0938

CVE-2020-0938 is a remote code execution vulnerability in the Microsoft Windows Adobe Type Manager Library, specifically affecting all Windows versions except Windows 10. An attacker could exploit this by crafting a malicious Adobe Type 1 PostScript font, leading to remote code execution. This vulnerability is rated as high severity (CVSS 7.8) with a low attack complexity and requires user interaction, potentially resulting in complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, as indicated by its presence in the KEV catalog, and has garnered significant community and media attention, despite no public exploit code being available on common platforms like Metasploit or ExploitDB.