coldbraid

CVE-2016-7256 Microsoft Windows

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

CVSS
not scored

CWE-284

On CISA’s exploited list

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Added
2022-05-25
Federal patch deadline
2022-06-15
Ransomware use
not known