CVE-2020-1355 : What You Need to Know

A remote code execution vulnerability in Windows Font Driver Host affecting various Windows versions.

Understanding CVE-2020-1355

What is CVE-2020-1355?

A remote code execution flaw in Windows Font Driver Host could allow an attacker to execute code on the system.

The Impact of CVE-2020-1355

Exploiting this vulnerability could lead to unauthorized code execution on the victim's system.

Technical Details of CVE-2020-1355

Vulnerability Description

The vulnerability arises from improper memory handling in the Windows Font Driver Host. The security update addresses this issue.

Affected Systems and Versions

Windows 10 Version 2004 (32-bit, ARM64, x64)
Windows Server Version 2004
Windows 10 Version 1909 (32-bit, x64, ARM64)
Windows Server Version 1909
Windows 10 Version 1903 (32-bit, x64, ARM64)
Windows Server Version 1903

Exploitation Mechanism

The vulnerability allows attackers to exploit memory handling in the Windows Font Driver Host, leading to code execution.

Mitigation and Prevention

Immediate Steps to Take

Apply the necessary security update from Microsoft promptly.
Monitor for any abnormal system behavior.
Implement principle of least privilege to limit the impact of successful exploits.

Long-Term Security Practices

Regularly update systems with the latest patches and security updates.
Conduct regular security assessments and penetration testing.
Educate users on safe browsing habits and recognizing phishing attempts.

Patching and Updates

Ensure that all affected systems are updated with the security patch provided by Microsoft.