Medium severity5.5NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026

CVE-2018-0760

Description

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0761, and CVE-2018-0855.

Affected products

Microsoft/Windowsllm-fuzzy
Range: 7 SP1, 2008 R2, 2012
Microsoft Corporation/Microsoft Windows Embedded OpenType (EOT) font enginev5
Range: Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012.

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0760nvdPatchVendor Advisory
www.securityfocus.com/bid/102953nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040374nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000