HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2015-2426

CVSS 8.8v3.1pub. 2015-07-20upd. 2026-04-22

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Driver Vulnerability."

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Microsoft Windows 10
OS
Microsoft
all versions
Microsoft Windows 7
OS
Microsoft
all versions
Microsoft Windows 8
OS
Microsoft
all versions
Microsoft Windows 8.1
OS
Microsoft
all versions
Microsoft Windows Rt
OS
Microsoft
all versions
Microsoft Windows Rt 8.1
OS
Microsoft
all versions
Microsoft Windows Server 2008
OS
Microsoft
r2
Microsoft Windows Server 2012
OS
Microsoft
r2
Microsoft Windows Vista
OS
Microsoft
all versions

CISA KEV — detailsi

Vendori: Microsoft ↗
Producti: Windows
Added to KEVi: March 28, 2022
Remediation deadline (US Federal)i: April 18, 2022(overdue)

🔧Advisory Microsoft↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.

🔴