VULNERABILITY INTELLIGENCE

CVE-2015-6130

CVSS score9.3 HIGH
EPSS probability20.72%
CISA KEVNot currently listed
Published2015-12-09
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."

Primary references