CVE-2016-7256

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."

• Published Nov 10, 2016
• CVSS 8.8 high
• 64.6% chance of exploitation in the next 30 days (EPSS)
• In CISA's Known Exploited Vulnerabilities catalog
• A fix is available

CVE-2016-7256 at the National Vulnerability Database