CVE-2010-3957

Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3,...

6.9 Medium

Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability."

Exploit likelihood

1.80%Down 0.5 points since Feb 4, 2022

What each source reports

CVE List 7.3

Record: CVE-2010-3957
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-415
Updated: 2026-11-02

EUVDEUVD-2010-3934 7.3

Record: EUVD-2010-3934
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rpc4-j585-wg54 7.3

Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3,...

Record: GHSA-rpc4-j585-wg54
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-415
Updated: 2026-11-02

NVD 7.3

Record: CVE-2010-3957
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-399, CWE-415
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3957 is a medium vulnerability (CVSS 6.9) in Microsoft Windows 7, published December 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References