Medium severity4.3NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026

CVE-2018-0855

Description

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0760, and CVE-2018-0761.

Affected products

Microsoft/Windowsllm-fuzzy
Range: = 7 SP1, = Server 2008 R2
Microsoft Corporation/Windows Embedded OpenType (EOT) font enginev5
Range: Windows 7 SP1 and Windows Server 2008 R2 SP1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0855nvdPatchVendor Advisory
www.securityfocus.com/bid/102936nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040374nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000