CVE-2016-7256

KEV

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Vendor / Project: Microsoft
Product: Windows
Date added: May 25, 2022
Due date: Jun 15, 2022
Known ransomware use: Unknown
CWEs: CWE-284

Description

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-7256