High severity8.8NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026

CVE-2018-1010

Description

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1012, CVE-2018-1013, CVE-2018-1015, CVE-2018-1016.

Affected products

Microsoft/Windowsllm-fuzzy

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1010nvdPatchVendor Advisory
www.securityfocus.com/bid/103594nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040656nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.032
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000