Stats
- First seen
- October 2022
- Last seen
- July 2026
Description
Detects a font exploiting CVE-2016-7274, an integer overflow in the Windows graphics character mapping handling that can allow privilege escalation. The rule matches the crafted mapping counts that public exploits use to corrupt kernel memory.