High severity7.0NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026
CVE-2018-1008
CVE-2018-1008
Description
An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory, aka "OpenType Font Driver Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Affected products
11- Range: Affects Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows Server 2012 R2, Windows 10, Windows Server 2016, Windows 10 Servers
- Range: 32-bit Systems
- Range: version 1709 (Server Core Installation)
- Range: 32-bit systems
- Range: Windows RT 8.1
32-bit Systems Service Pack 2+ 1 more
- (no CPE)range: 32-bit Systems Service Pack 2
- (no CPE)range: Itanium-Based Systems Service Pack 1
(Server Core installation)+ 1 more
- (no CPE)range: (Server Core installation)
- (no CPE)range: (Server Core installation)
- Range: (Server Core installation)
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1008nvdPatchVendor Advisory
- www.securityfocus.com/bid/103658nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040673nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.