CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows OpenType Font Parsing Remote Code Execution Vulnerability (CVE-2016-7256, MS16-132)
[Affected Scope] Microsoft Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10 (Gold/1511/1607), and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with kernel privileges by enticing users to visit a malicious website or open a crafted document containing malicious OpenType fonts
[Mitigation] Immediately apply the official Microsoft security patch (MS16-132) or implement the registry workaround to disable the ATMFD.dll driver
Microsoft Windows Adobe Type Manager Library (atmfd.dll) Buffer Underflow Remote Code Execution Vulnerability (CVE-2015-2426)
[Affected Scope] Windows Vista SP2, 7 SP1, 8, 8.1, RT, and Windows Server 2008/2012
[Impact] Remote attackers can execute arbitrary code with kernel-level privileges by tricking users into rendering a specially crafted OpenType font
[Mitigation] Apply the official Microsoft MS15-078 security patch immediately, or disable the Adobe Type Manager Font Driver (atmfd.dll) as a temporary workaround
Windows Adobe Type Manager Font Driver (ATMFD.DLL) Memory Corruption Local Privilege Escalation (CVE-2015-2387)
[Affected Scope] Windows Server 2003/2008/2012, Windows Vista, Windows 7, Windows 8/8.1, and Windows RT systems.
[Impact] Local attackers can execute arbitrary code in kernel mode via a crafted application, gaining complete control of the affected system.
[Mitigation] Apply the official Microsoft security patch (MS15-077) immediately, or disable the ATMFD.DLL driver via registry modification.