CVE-2019-1152

CVE-2019-1152 is a remote code execution vulnerability in the Windows font library affecting various versions of Microsoft Windows and Windows Server. It allows an attacker to take full control of an affected system by improperly handling specially crafted embedded fonts. The vulnerability has a high CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability, and requires user interaction (e.g., clicking a malicious link or opening a crafted document) for exploitation. While not listed in CISA's KEV catalog, there is public exploit code available on ExploitDB, and it has received some community discussion and media coverage.