HexBrain

Browse / CVEs / CVE-2016-7256

CVE-2016-7256· microsoft / windows· CWE-284

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Exploited in the wild. Listed by CISA on 2022-05-25; known to be used by ransomware.

64.6%likelihood of exploitation, next 30 days
99%of all CVEs are less likely
Nonecheck to confirm it

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

Use this check only on systems you are authorised to test. Where the data comes from