CVE-2018-0855

EPSS 6.0%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 6.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Feb 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0760, and CVE-2018-0761.

Affected products

Microsoft Corporation · Windows Embedded OpenType (EOT) font engine

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0855 http://www.securityfocus.com/bid/102936 http://www.securitytracker.com/id/1040374