CVE-2016-7256

No fix known ExploitedEPSS 65%CVSS 8.8

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."

Published 2016-11-10 · In CISA KEV since 2022-05-25 · CVE record · OSV

Products: microsoft windows_10_1507, microsoft windows_10_1511, microsoft windows_10_1607, microsoft windows_7, microsoft windows_8.1, microsoft windows_rt_8.1, microsoft windows_server_2008, microsoft windows_server_2012, Microsoft Windows Server 2016, microsoft windows_vista