CVE-2018-0760 — CVE-2018-0760

CVE-2018-0760

MEDIUM · CVSS 5.5

EPSS exploitation probability: 0%

Published 2018-02-15T02:29:01.513 · Last modified 2026-06-17T01:31:36.250

Summary

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0761, and CVE-2018-0855.

Affected products

microsoft — windows_7

Does this affect you?

Add your gear to cvedb and we'll alert you only when microsoft ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.