Skip to content
BackEsc
Connect AISign inSign up free

March 2016 · Band 4

Possible (1 to 10%)

214 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Connect AI

Every one of the 214 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vul…CVE-2016-0116Microsoft · 10.0% likely

    CWE-119Microsoft

  2. The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunctio…CVE-2016-3191Pcre · 8.4% likely

    CWE-119Pcre

  3. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0994Adobe · 8.0% likely

    CWE-416Adobe

  4. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.…CVE-2015-8655Adobe · 7.9% likely

    CWE-416Adobe

  5. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.…CVE-2015-8653Adobe · 7.9% likely

    CWE-416Adobe

  6. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.…CVE-2015-8821Adobe · 7.7% likely

    CWE-416Adobe

  7. Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web…CVE-2016-2279Rockwellautomation · CVSS 6.1 · 7.6% likely

    CWE-79Rockwell Automation

  8. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0990Adobe · 7.2% likely

    CWE-416Adobe1 bounty report

  9. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20…CVE-2015-8658Adobe · 7.2% likely

    CWE-787Adobe

  10. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20…CVE-2015-8657Adobe · 7.2% likely

    CWE-787Adobe

  11. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20…CVE-2015-8656Adobe · 7.2% likely

    CWE-787Adobe

  12. Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577…CVE-2016-0996Adobe · 7.1% likely

    CWE-416Adobe

  13. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20…CVE-2015-8820Adobe · 7.1% likely

    CWE-787Adobe

  14. libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…CVE-2016-1761Apple · 6.9% likely

    CWE-119Apple

  15. An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,…CVE-2016-0704Openssl · 6.9% likely

    CWE-200OpenSSL1 bounty report

  16. Buffer overflow in the web server on Cisco DPC2203 and EPC2203 devices with firmware r1_customer_image allows remote attackers to execute arbitrary code via a crafted HTTP request…CVE-2016-1327Cisco · 6.9% likely

    CWE-119Cisco

  17. HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apa…CVE-2016-1998Hp · 6.8% likely

    CWE-20HP

  18. HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java…CVE-2016-1997Hp · 6.7% likely

    CWE-20HP

  19. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.…CVE-2015-8822Adobe · 6.5% likely

    CWE-416Adobe

  20. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0995Adobe · 6.4% likely

    CWE-416Adobe

  21. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0987Adobe · 6.4% likely

    CWE-416Adobe

  22. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20…CVE-2015-8654Adobe · 6.3% likely

    CWE-787Adobe

  23. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20…CVE-2015-8652Adobe · 6.3% likely

    CWE-787Adobe

  24. The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.CVE-2016-1762Xmlsoft · CVSS 8.1 · 6.1% likely

    CWE-122Xmlsoft1 bounty report

  25. Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and…CVE-2016-1009Adobe · 6.1% likely

    CWE-119Adobe

  26. Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and…CVE-2016-1007Adobe · 6.1% likely

    CWE-119Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated