Vendor / Project: Microsoft Product: Windows Description: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system. Required Action: Apply updates per vendor instructions. Due Date: 2022-06-15 Ransomware Campaign Use: Unknown CWEs: CWE-284 Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-7256
CVE-2016-7256 — Microsoft Windows Open Type Font Remote Code Execution Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-05-25 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 8.8
- Quelle-ID:
cisa_kev - uid_hash:
20a6ee77b8e58c5db9d9e4949eccd58a4fbc267338a35043aa7af734ac801f28
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.8 |
HIGH |
8.8 |
2016-11-10 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |