Medium severity5.5NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026

CVE-2018-0755

Description

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0760, CVE-2018-0761, and CVE-2018-0855.

Affected products

Microsoft/Windowsllm-fuzzy
Range: 7 SP1, Server 2008 R2
Microsoft Corporation/Microsoft Windows Embedded OpenType (EOT) font enginev5
Range: Windows 7 SP1 and Windows Server 2008 R2

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0755nvdPatchVendor Advisory
www.securityfocus.com/bid/102934nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040374nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000