Microsoft has released a critical out-of-band security update for all supported versions of Windows, addressing a serious flaw that could potentially lead to remote code execution on unpatched systems.
The update resolves a vulnerability surrounding OpenType fonts. Without the update installed, if a user opens a “specially crafted” document or visits a dodgy webpage that contains embedded OpenType fonts, an attacker could remotely execute code on the victim’s system.
