Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2016-3715 ImageMagick Arbitrary File Deletion Vulnerability HIGH N/A 75.31% cvelistv5 2021-11-03
cve-2016-3714 ImageMagick Improper Input Validation Vulnerability HIGH N/A 97.48% cvelistv5 2024-09-09
cve-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability HIGH N/A 3.67% cvelistv5 2021-11-03
cve-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability HIGH N/A 92.33% cvelistv5 2023-05-12
cve-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability HIGH N/A 68.47% cvelistv5 2022-05-25
cve-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability MEDIUM 6.5 26.29% cvelistv5 2022-05-24
cve-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerability CRITICAL N/A 20.47% cvelistv5 2022-03-15
cve-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability HIGH N/A 33.33% cvelistv5 2022-05-24
cve-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability HIGH N/A 43.31% cvelistv5 2021-11-03
cve-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability HIGH N/A 98.52% cvelistv5 2022-02-10
cve-2016-2388 SAP NetWeaver Information Disclosure Vulnerability HIGH N/A 52.21% cvelistv5 2022-06-09
cve-2016-2386 SAP NetWeaver SQL Injection Vulnerability HIGH N/A 71.52% cvelistv5 2022-06-09
cve-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability HIGH N/A 64.24% cvelistv5 2024-01-08
cve-2016-1646 Google Chromium V8 Out-of-Bounds Read Vulnerability HIGH N/A 48.11% cvelistv5 2022-06-08
cve-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability HIGH N/A 98.29% cvelistv5 2022-03-25
cve-2016-15048 CVE-2016-15048 CRITICAL 10.0 7.36% cvelistv5
cve-2016-11021 D-Link DCS-930L Devices OS Command Injection Vulnerability HIGH 7.2 68.87% cvelistv5 2022-03-25
cve-2016-10372 The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature. CRITICAL 9.8 81.77% cvelistv5 2026-06-17
cve-2016-1019 Adobe Flash Player Arbitrary Code Execution Vulnerability CRITICAL N/A 22.32% cvelistv5 2022-03-03
cve-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability HIGH N/A 83.33% cvelistv5 2022-03-25
cve-2016-10108 Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data. CRITICAL 9.8 97.82% cvelistv5 2026-06-17
cve-2016-1010 Adobe Flash Player and AIR Integer Overflow Vulnerability HIGH N/A 19.33% cvelistv5 2022-05-25
cve-2016-10033 PHPMailer Command Injection Vulnerability HIGH N/A 99.71% cvelistv5 2025-07-07
cve-2016-0984 SUSE CVE CVE-2016-0984 HIGH 8.8 54.54% cvelistv5 2025-08-02
cve-2016-0752 Ruby on Rails Directory Traversal Vulnerability HIGH N/A 95.54% cvelistv5 2022-03-25
cve-2016-0457 CVE-2016-0457 HIGH N/A 3.81% cvelistv5
cve-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH 7.5 94.06% cvelistv5 2022-03-28
cve-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability HIGH N/A 69.85% cvelistv5 2021-11-03
cve-2016-0167 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A 5.68% cvelistv5 2021-11-03
cve-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability HIGH N/A 13.73% cvelistv5 2023-06-22