CVE-2016-7274

CVE-2016-7274 is a critical remote code execution vulnerability affecting Uniscribe in various Microsoft Windows versions, including Vista, Windows 7, 8.1, 10, and Server editions. This flaw allows attackers to execute arbitrary code by enticing users to visit a specially crafted website. With a CVSS score of 8.8 (High), it presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a public exploit (EDB-41615) demonstrating a heap buffer overflow exists, though there's no evidence of widespread active exploitation or significant community discussion.