EXPOSURES › CVE-2016-7256
CVE-2016-7256
HIGH ⌖ ON CISA KEV · EXPLOITEDA remote code execution flaw in Windows font handling was actively exploited in the wild, allowing attackers to take control of systems.
Microsoft Windows improperly handled specially crafted embedded fonts, enabling remote code execution. This unpatched vulnerability was actively exploited in the wild, allowing attackers to take control of affected systems. DIB organizations must ensure all Windows systems are patched and monitored for exploitation attempts, as this flaw represents a significant compliance and security risk.
Shame score — A known, unpatched RCE vulnerability was actively exploited in the wild, demonstrating negligence in patch management and leaving systems vulnerable to remote takeover.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |