PatchTheCVEuse any font vulnerabilities and fixes
Recent CVEs affecting use any font, with upgrade or downgrade steps. 1 tracked.
Also searched as: useanyfont.
use any font has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-09-25. Highest priority: CVE-2024-47305 (score 18/100).
- CVE-2024-47305 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Req
FAQ
How do I fix use any font vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is use any font being exploited right now?
None of the tracked use any font CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which use any font CVE should I patch first?
CVE-2024-47305 currently ranks highest (18/100): Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Req.