CVE-2020-1020

CVE-2020-1020 is a remote code execution vulnerability in the Microsoft Windows Adobe Type Manager Library, specifically impacting systems prior to Windows 10. The vulnerability, triggered by a specially crafted Adobe Type 1 PostScript font, allows an unauthenticated attacker to execute arbitrary code remotely with high impact on confidentiality, integrity, and availability. Rated with a CVSS score of 8.8 (HIGH) and an EPSS score indicating high exploitability, this flaw is actively exploited in the wild, as confirmed by its presence in the KEV catalog. While no public Metasploit, Nuclei, or ExploitDB modules exist, the vulnerability has garnered significant community discussion and media coverage, including reports of its use in targeted hacking campaigns.