Description
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 15 Jun 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.