PULSE
LIVE0signals / 24h
ES
FEED
vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server
← All CVEs
CVE Watch—

CVE-2016-7256

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

64.8%

p99

KEV

YES

May 25, 2022

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d
64.8%EPSS · 30 days64.8%
2026-08-022026-08-31
KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Added to KEV

May 25, 2022

Remediate by

Jun 15, 2022

Known ransomware use

No

Summary description

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-7256

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-322024.3 MED
99.2%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability17dCVE-2026-208055.5 MED
91.8%
KEV—78Microsoft Windows Information Disclosure Vulnerability32dCVE-2025-266337.0 HIG
98.1%
KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability26dCVE-2024-490398.8 HIG
96.3%
KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability27dCVE-2024-434618.8 HIG
98.9%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability21dCVE-2024-382175.4 MED
95.3%
KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability21d