CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-11-10
Microsoft Windows OpenType Font Parsing Remote Code Execution Vulnerability (CVE-2016-7256, MS16-132)
[Affected Scope] Microsoft Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10 (Gold/1511/1607), and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with kernel privileges by enticing users to visit a malicious website or open a crafted document containing malicious OpenType fonts
[Mitigation] Immediately apply the official Microsoft security patch (MS16-132) or implement the registry workaround to disable the ATMFD.dll driver