CVE-2016-3396

CVE-2016-3396 is a remote code execution vulnerability in the Graphics Device Interface (GDI+) affecting various Microsoft Windows and Office products. An attacker could exploit this by tricking a user into opening a crafted document containing an embedded font, leading to arbitrary code execution. With a CVSS score of 7.8 (High), this vulnerability requires user interaction (UI:R) but has low attack complexity (AC:L), potentially resulting in high impact to confidentiality, integrity, and availability. Despite its severity, there is no public exploit code available (Metasploit, Nuclei, ExploitDB: None), and it shows no signs of active exploitation or significant community discussion.