Microsoft published a security advisory alerting about two vulnerabilities in Windows font parsing. Vulnerabilities are in ATMFD.DLL, a kernel font driver responsible for processing Adobe Type 1 PostScript and OpenType fonts. Both vulnerabilities are in font parsing, which provides powerful attack vectors such as just viewing font files in Windows Explorer, or opening a malicious document. Microsoft issued an official fix for this issue with April 2020 Windows Updates and assigned two CVE IDs to it. Our patches thus ceased being free and now require a PRO license.”]
Source: https://blog.0patch.com/2020/03/micropatching-unknown-0days-in-windows.html