Cyber Resilience

CVE-2016-7256

Microsoft Windows Server 2008 r2

CISA KEVActive ExploitationEUVD Exploited
Published
10 November 2016
Modified
22 April 2026
KEV Added
25 May 2022
Patch / advisory
View advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.65 99.2th percentile
Risk Priority 90 floored blend · peak EPSS

Summary

CVE-2016-7256 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 0.8% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2016-7256 resides in atmfd.dll in the Windows font library and affects Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold 1511 and 1607, and Windows Server 2016. It is described as an Open Type Font Remote Code Execution Vulnerability that can be triggered through specially crafted input.

Remote attackers can exploit the flaw by serving a crafted web site to a victim, achieving arbitrary code execution on the target system. The CVSS 3.1 score of 8.8 reflects network attack vector, low complexity, no required privileges, required user interaction, and high impact to confidentiality, integrity, and availability.

Microsoft security bulletin MS16-132 supplies patches that address the issue across the listed Windows versions and includes associated mitigation guidance.

EU & UK References

Vulnerability Data

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows…

more

Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."

CWE(s)
NVD-CWE-noinfo
KEV Date Added
25 May 2022

Related Threats

CVEs Like This One

CVE-2017-0001Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0005Same product: Microsoft Windows 10 1507both on KEV
CVE-2016-7255Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0149Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0059Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0022Same product: Microsoft Windows 10 1507both on KEV
CVE-2016-3309Same product: Microsoft Windows 10 1507both on KEV
CVE-2016-3393Same product: Microsoft Windows 10 1507both on KEV
CVE-2016-3298Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0263Same product: Microsoft Windows 10 1507both on KEV

Affected Assets

microsoft
windows 10 1507
all versions
microsoft
windows 10 1511
all versions
microsoft
windows 10 1607
all versions
microsoft
windows 7
all versions
microsoft
windows 8.1
all versions
microsoft
windows rt 8.1
all versions
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
all versions, r2
microsoft
windows server 2016
all versions
microsoft
windows vista
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References