CVE-2016-7256

criticalknown exploitedcovered by 1 sourcefirst seen 2022-05-25

Actively exploited. CVE-2016-7256 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-05-25) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

CSIRTS triage

What: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts.
Who is affected: All users of affected Windows versions are vulnerable.
Urgency: This vulnerability is critical and actively exploited, necessitating prompt remediation.
Action: Install the latest Windows updates to fix this vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2016-7256

Get an email if CVE-2016-7256 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 99% of all EPSS-scored CVEs.

Advisory coverage (1)

criticalexploitedCVE-2016-7256: Microsoft Windows Open Type Font Remote Code Execution Vulnerabilitycisa-kev · 2022-05-25

External references

NVD record for CVE-2016-7256

CVE.org record

CISA KEV catalog

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2016-7256 status](https://www.csirts.com/badge/CVE-2016-7256)](https://www.csirts.com/cve/CVE-2016-7256)