CVE-2016-0145

58

FAUCET Score

CVE-2016-0145 is a critical graphics memory corruption vulnerability affecting the font library across numerous Microsoft Windows versions, Office products, .NET Framework, and communication software. An unauthenticated remote attacker can exploit this by enticing a user to open a crafted embedded font, leading to arbitrary code execution. With a CVSS score of 8.8 (High) and an EPSS percentile of 98.8%, this vulnerability presents a significant risk, requiring user interaction but offering full confidentiality, integrity, and availability impact. While not actively exploited in the wild (KEV), a public exploit (EDB-39743) exists, though community discussion and media coverage remain low.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		3.0CPE matchmatch criteria	cpe:2.3:a:microsoft:.net_framework:3.0:sp2::::::
		3.5CPE matchmatch criteria	cpe:2.3:a:microsoft:.net_framework:3.5:::::::*
		3.5.1CPE matchmatch criteria	cpe:2.3:a:microsoft:.net_framework:3.5.1:::::::*
		2007CPE matchmatch criteria	cpe:2.3:a:microsoft:live_meeting:2007:::::::*
		2010CPE matchmatch criteria	cpe:2.3:a:microsoft:lync:2010:::::::*

CVSS Data

CVSS version used by this source: 3.0

8.8HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.8

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

43.27%

Probability of exploitation in next 30 days

EPSS Percentile

98.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

ExploitDB: EDB-39743 · Apr 28, 2016

This CVE's current EPSS score of 0.4327 is in the 99th percentile among its peer group of 14,825 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (79)

microsoftpatch availablevia msrc

Product: Microsoft Live Meeting 2007 Console

microsoftpatch availablevia msrc

Product: Windows 10 for 32-bit Systems

microsoftpatch availablevia msrc

Product: Windows 10 for x64-based Systems

microsoftpatch availablevia msrc

Product: Windows 10 Version 1511 for 32-bit Systems

microsoftpatch availablevia msrc

Product: Windows 10 Version 1511 for x64-based Systems

microsoftpatch availablevia msrc

Product: Microsoft Office 2007 Service Pack 3

microsoftpatch availablevia msrc

Product: Microsoft Office 2010 Service Pack 2 (32-bit editions)

microsoftpatch availablevia msrc

Product: Microsoft Office 2010 Service Pack 2 (64-bit editions)

microsoftpatch availablevia msrc

Product: Windows 7 for 32-bit Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows 7 for x64-based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows 8.1 for 32-bit systems

microsoftpatch availablevia msrc

Product: Windows 8.1 for x64-based systems

microsoftpatch availablevia msrc

Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Server 2012

microsoftpatch availablevia msrc

Product: Windows Server 2012 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Server 2012 R2

microsoftpatch availablevia msrc

Product: Windows Server 2012 R2 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Vista Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Vista x64 Edition Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Server 2008 for 32-bit Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Server 2008 for Itanium-Based Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Server 2008 for x64-based Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

microsoftpatch availablevia msrc

Product: Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Windows RT 8.1

microsoftpatch availablevia msrc

Product: Microsoft Lync 2013 Service Pack 1 (32-bit)

microsoftpatch availablevia msrc

Product: Microsoft Lync Basic 2013 Service Pack 1 (32-bit)

microsoftpatch availablevia msrc

Product: Microsoft Lync 2013 Service Pack 1 (64-bit)

microsoftpatch availablevia msrc

Product: Microsoft Lync Basic 2013 Service Pack 1 (64-bit)

microsoftpatch availablevia msrc

Product: Microsoft Lync 2010 Attendee (admin level install)

microsoftpatch availablevia msrc

Product: Microsoft Lync 2010 (32-bit)

microsoftpatch availablevia msrc

Product: Microsoft Lync 2010 Attendee (user level install)

microsoftpatch availablevia msrc

Product: Microsoft Lync 2010 (64-bit)

microsoftpatch availablevia msrc

Product: Skype for Business 2016 (32-bit)

microsoftpatch availablevia msrc

Product: Skype for Business 2016 (64-bit)

microsoftpatch availablevia msrc

Product: Skype for Business 2016 Basic (32-bit)

microsoftpatch availablevia msrc

Product: Skype for Business 2016 Basic (64-bit)

microsoftpatch availablevia msrc

Product: Microsoft Office Word Viewer

microsoftpatch availablevia msrc

Product: Microsoft Word 2007 Service Pack 3

microsoftpatch availablevia msrc

Product: Microsoft Word 2010 Service Pack 2 (32-bit editions)

microsoftpatch availablevia msrc

Product: Microsoft Word 2010 Service Pack 2 (64-bit editions)

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows Server 2012 R2

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.0 Service Pack 2 on Windows Vista Service Pack 2

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.0 Service Pack 2 on Windows Vista x64 Edition Service Pack 2

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)

microsoftpatch availablevia msrc

Product: Microsoft .NET Framework 3.5 on Windows Server 2012

microsoftpatch availablevia msrc

Product: 2472-10481

microsoftpatch availablevia msrc

Product: 2472-10482

microsoftpatch availablevia msrc

Product: 2472-10483

microsoftpatch availablevia msrc

Product: 2472-10543

microsoftpatch availablevia msrc

Product: 2472-10729

microsoftpatch availablevia msrc

Product: 2472-10735

microsoftpatch availablevia msrc

Product: 2472-10789

microsoftpatch availablevia msrc

Product: 2472-10788

microsoftpatch availablevia msrc

Product: 9495-10047

microsoftpatch availablevia msrc

Product: 9495-10051

microsoftpatch availablevia msrc

Product: 9495-10049

microsoftpatch availablevia msrc

Product: 9495-10048

microsoftpatch availablevia msrc

Product: 9195-4393

microsoftpatch availablevia msrc

Product: 9195-9318

microsoftpatch availablevia msrc

Product: 9195-9316

microsoftpatch availablevia msrc

Product: 9195-9312

microsoftpatch availablevia msrc

Product: 2472-10379

microsoftpatch availablevia msrc

Product: 2472-10378

Vendor Advisories (1)

microsoft2016-Apr/CVE-2016-0145Critical

GDI+ Remote Code Execution Vulnerability

References

docs.microsoft.com / en-us/security-updates/securitybulletins/2016/ms16-039

exploit-db.com / exploits/39743

securitytracker.com / id/1035528

securitytracker.com / id/1035529

securitytracker.com / id/1035530

securitytracker.com / id/1035531

securitytracker.com / id/1035532

Third Party Advisory