CVE-2019-1456

8.8 highEPSS 9.7%

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 9.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2019-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_7
microsoft:windows_8.1
microsoft:windows_rt_8.1
microsoft:windows_server_2008
microsoft:windows_server_2012
microsoft:windows_server_2016
microsoft:windows_server_2019

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1456
https://www.zerodayinitiative.com/advisories/ZDI-19-986/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1456
https://www.zerodayinitiative.com/advisories/ZDI-19-986/

Check your stack JSON