Medium severity5.5NVD Advisory· Published Jan 4, 2018· Updated Jun 17, 2026

CVE-2018-0754

Description

The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Information Disclosure Vulnerability".

Affected products

Microsoft/Windowsllm-fuzzy
Range: 7 SP1, 8.1, RT 8.1, Server 2008 SP2, Server 2008 R2 SP1, Server 2012, Server 2012 R2, 10 Gold, 10 1511, 10 1703, 10 1709, Server 2016, Server 1709
Microsoft Corporation/Windows Adobe Type Manager Font Driver (Atmfd.dll)v5
Range: Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0754nvdPatchVendor Advisory
www.securityfocus.com/bid/102362nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040098nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000