EXPOSURES › CVE-2015-2426
CVE-2015-2426
HIGH ⌖ ON CISA KEV · EXPLOITEDA remote code execution flaw in Windows' Adobe Type Manager Library allowed attackers to execute arbitrary code via specially crafted OpenType fonts.
This vulnerability enabled remote code execution without requiring user interaction, making it a high-risk threat for systems processing font files. DIB organizations must ensure all Windows systems are patched against this CVE, as it was actively exploited in the wild and linked to ransomware campaigns. Failure to patch exposes networks to lateral movement and data exfiltration.
Shame score — Microsoft failed to patch a known, actively exploited vulnerability for years, allowing widespread exploitation in ransomware attacks.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |