{"metadata": {"vulnerability": "CVE-2020-1027", "count": 44, "kinds": {"milestone": 4, "sighting": 12, "kev": 11, "other": 17}}, "data": [{"timestamp": "2019-11-04T00:00:00Z", "date_only": false, "value": "2019-11-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-1027", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-04-15T00:00:00Z", "date_only": false, "value": "2020-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-224", "record": "CERTFR-2020-AVI-224", "field": "revisions.0.revision_date"}, {"timestamp": "2020-04-15T12:22:54Z", "date_only": false, "value": "2020-04-15T12:22:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/475", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "8f0666ef-cb9f-4de4-816c-e7afe30e0044", "content": "Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0430\u043f\u0434\u0435\u0439\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 113 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0440\u0438 0-day.\n\n\u041f\u0435\u0440\u0432\u0430\u044f 0-day, CVE-2020-1020 (\u043c\u044b \u043e \u043d\u0435\u0439 \u043f\u0438\u0441\u0430\u043b\u0438), \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Windows Adobe Type Manager \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u041d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0435\u0435 Microsoft \u0443\u0434\u043e\u0441\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0439\u0447\u0430\u0441.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f - CVE-2020-0938 - \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Windows Adobe Type Manager \u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 . \u0412 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 Tenable, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0430\u0441\u044c.\n\n\u0418 \u0442\u0440\u0435\u0442\u044c\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2020-1027- \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0412\u0441\u0435\u043c \u0430\u043f\u0434\u0435\u0439\u0442\u0438\u0442\u044c Windows.", "url": "https://t.me/true_secator/475"}, {"timestamp": "2020-04-15T15:13:29Z", "date_only": false, "value": "2020-04-15T15:13:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-1027", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-04-15T15:15:00Z", "date_only": false, "value": "2020-04-15T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4425-FXH6-87FR", "record": "GHSA-4425-FXH6-87FR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-04-15T15:15:00Z", "date_only": false, "value": "2020-04-15T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-1027", "record": "GSD-2020-1027", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-04-15T15:15:21.010Z", "date_only": false, "value": "2020-04-15T15:15:21.010", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-1027", "record": "FKIE_CVE-2020-1027", "field": "published"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": true, "value": "2020-04-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-25583", "record": "CNVD-2020-25583", "field": "submitTime"}, {"timestamp": "2020-04-17T11:03:51Z", "date_only": false, "value": "2020-04-17T11:03:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DerechodelaRed/2746", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "6d5a9a80-3db5-4530-a305-7123f1c2c20e", "content": "\u26a0\ufe0f Microsoft parchea tres zero\u2011day explotadas de manera activa en \u00faltima actualizaci\u00f3n.\n\nSe trata de:\n\n\u25aa\ufe0fCVE-2020-1027: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1027\n\u25aa\ufe0fCVE-2020-0938: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020\n\u25aa\ufe0fCVE-2020-1020: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938\n\n\u2795info en el parche de abril: https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Apr\n\n\ud83d\udce1 t.me/derechodelared", "url": "https://t.me/DerechodelaRed/2746"}, {"timestamp": "2020-04-29T00:00:00Z", "date_only": true, "value": "2020-04-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-25583", "record": "CNVD-2020-25583", "field": "openTime"}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-1027", "field": "timestamps.asserted_at", "uuid": "26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-1027", "field": "timestamps.asserted_at", "uuid": "cc12baf1-1b84-41c6-b5e0-9a564324f1aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": true, "value": "2022-05-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1027", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-1027", "field": "evidence.0.details.added_date", "uuid": "cc12baf1-1b84-41c6-b5e0-9a564324f1aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": true, "value": "2022-05-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-1027", "field": "evidence.0.details.date_added", "uuid": "26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-1027", "field": "timestamps.first_seen_at", "uuid": "26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-1027", "field": "timestamps.first_seen_at", "uuid": "cc12baf1-1b84-41c6-b5e0-9a564324f1aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-1027", "field": "status.status_updated_at", "uuid": "26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-1027", "field": "status.status_updated_at", "uuid": "cc12baf1-1b84-41c6-b5e0-9a564324f1aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1027", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-05-24T17:14:37Z", "date_only": false, "value": "2022-05-24T17:14:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4425-FXH6-87FR", "record": "GHSA-4425-FXH6-87FR", "field": "published"}, {"timestamp": "2022-06-07T18:51:40Z", "date_only": false, "value": "2022-06-07T18:51:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/2486", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "05cd89da-2a91-4985-ab55-f54c8b5c004f", "content": "#Research\nResearching new ways to detect 0-day exploits in the wild\nPart 1 - Introduction\nhttps://googleprojectzero.blogspot.com/2021/01/introducing-in-wild-series.html\nPart 2 - Chrome Infinity Bug\nhttps://googleprojectzero.blogspot.com/2021/01/in-wild-series-chrome-infinity-bug.html\nPart 3 - Chrome Exploits (PoC for CVE-2017-5070, CVE-2020-6418, CVE-2019-5782, CVE-2019-13764)\nhttps://googleprojectzero.blogspot.com/2021/01/in-wild-series-chrome-exploits.html\nPart 4 - Android Exploits\nhttps://googleprojectzero.blogspot.com/2021/01/in-wild-series-android-exploits.html\nPart 5 - Android Post-Exploitation\nhttps://googleprojectzero.blogspot.com/2021/01/in-wild-series-android-post-exploitation.html\nPart 6 - Windows Exploits (PoC for CVE-2020-0938, CVE-2020-1020, CVE-2020-1027)\nhttps://googleprojectzero.blogspot.com/2021/01/in-wild-series-windows-exploits.html", "url": "https://t.me/CyberSecurityTechnologies/2486"}, {"timestamp": "2022-06-13T00:00:00Z", "date_only": true, "value": "2022-06-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-1027", "field": "evidence.0.details.due_date", "uuid": "26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-12T16:10:23Z", "date_only": false, "value": "2022-08-12T16:10:23.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2020-1027", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-30T13:30:00Z", "date_only": false, "value": "2022-09-30T13:30Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-1027", "record": "GSD-2020-1027", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "11cf0b53-b839-486b-9fce-6936e92d3709"}, {"timestamp": "2023-12-13T01:21:59.041Z", "date_only": false, "value": "2023-12-13T01:21:59.041723Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-1027", "record": "GSD-2020-1027", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T06:25:00.878Z", "date_only": false, "value": "2024-08-04T06:25:00.878Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-1027", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:31:10.992Z", "date_only": false, "value": "2024-12-24T20:31:10.992808Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971563", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "e6b61e49-9622-4a7c-bf4c-958585d9d017", "url": "https://feedsin.space/feed/CISAKevBot/items/2971563"}, {"timestamp": "2025-02-07T15:14:06.659Z", "date_only": false, "value": "2025-02-07T15:14:06.659846Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1027", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-07T15:14:06.659Z", "date_only": false, "value": "2025-02-07T15:14:06.659846Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-1027", "record": "FKIE_CVE-2020-1027", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:26Z", "date_only": false, "value": "2025-02-23T02:10:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "0252172b-d086-4098-a7e7-55560add6342"}, {"timestamp": "2025-08-31T03:00:47Z", "date_only": false, "value": "2025-08-31T03:00:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "4b75fa3a-efe6-40f8-8bbb-cd70b7d61bbd"}, {"timestamp": "2025-10-21T23:35:46.038Z", "date_only": false, "value": "2025-10-21T23:35:46.038Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-1027", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:46.038Z", "date_only": false, "value": "2025-10-21T23:35:46.038Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1027", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:52Z", "date_only": false, "value": "2025-10-22T00:31:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4425-FXH6-87FR", "record": "GHSA-4425-FXH6-87FR", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-1027", "field": "timestamps.recorded_at", "uuid": "26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:41.812Z", "date_only": false, "value": "2026-02-02T12:27:41.812021Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "c98e7f80-fd26-40e7-af93-5c76608b1b28", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26a4c008-3b4d-4f01-ac92-0fa40e9fd5a7"}, {"timestamp": "2026-06-17T03:00:15.313Z", "date_only": false, "value": "2026-06-17T03:00:15.313", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-1027", "record": "FKIE_CVE-2020-1027", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:14.971Z", "date_only": false, "value": "2026-06-19T12:47:14.971054Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c69e2cb-e41d-4eaf-ac4c-f1f5409793ff", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "98e45568-6e57-4673-92f0-83468fdfd27c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c69e2cb-e41d-4eaf-ac4c-f1f5409793ff"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-1027", "field": "timestamps.recorded_at", "uuid": "cc12baf1-1b84-41c6-b5e0-9a564324f1aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:22.893Z", "date_only": false, "value": "2026-06-23T14:05:22.893757Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc12baf1-1b84-41c6-b5e0-9a564324f1aa", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "d98c1c4d-db9d-47b6-998f-8f6f83de30f7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc12baf1-1b84-41c6-b5e0-9a564324f1aa"}, {"timestamp": "2026-06-29T10:43:56.560Z", "date_only": false, "value": "2026-06-29T10:43:56.560161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mpgcldnyfe2n", "record": "cve-2020-1027", "field": "creation_timestamp", "uuid": "d70ca1f6-0355-4f68-8f88-b1bf9adc53bc", "content": "Original text: \"CVE-2020-1027: Windows buffer overflow in CSRSS\" \u2014 Sergei Glazunov, 0-days In-the-Wild / Google Project Zero (January 12, 2021). Code blocks and structural definitions are reproduced verbatim with attribut\nhttps://core-jmp.org/2026/06/cve-2020-1027-windows-csrss-heap-buffer-overflow/", "url": "https://bsky.app/profile/oxfemale.bsky.social/post/3mpgcldnyfe2n"}, {"timestamp": "2026-08-05T05:00:06.791Z", "date_only": false, "value": "2026-08-05T05:00:06.791018Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/849", "record": "CVE-2020-1027", "field": "creation_timestamp", "uuid": "eeb9a97b-a1bc-48e5-b9a8-d03919812642", "content": "Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430\u00bb Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 113 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, 14 \u0430\u043f\u0440\u0435\u043b\u044f, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 113 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2020-1020 , \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 SecurityLab \u0441\u043e\u043e\u0431\u0449\u0430\u043b \u0435\u0449\u0435 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Adobe Type Manager (atmfd.dll), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e Windows \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 PostScript Type 1 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows (\u043a\u0440\u043e\u043c\u0435 Windows 10) \u0438 Windows Server, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0431\u043e\u043b\u0435\u0435 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e Windows 7.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0938) \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Adobe Type Manager. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0445\u043e\u0436\u0430 \u043d\u0430 CVE-2020-1020, \u043e\u0434\u043d\u0430\u043a\u043e \u043e \u043d\u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e 14 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0422\u0440\u0435\u0442\u044c\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430\u00bb \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2020-1027 . \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u044f\u0434\u0440\u043e Windows \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u044f\u0434\u0440\u0430.\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0434\u0432\u0443\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u2013 Project Zero \u0438 Threat Analysis Group (TAG). \u041f\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 Microsoft \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u044c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u043e\u0434\u043d\u0438\u043c\u0438 \u0438 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u043b\u0438 \u0440\u0430\u0437\u043d\u044b\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/506679.php", "url": "https://t.me/timcore_hacking/849"}]}