Skip to content

August 2016 · Band 1

Exploited in the wild

6 CVEs · 6 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
6

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Modu…CVE-2016-6366Cisco · CVSS 8.8 · 88% likely

    CWE-120Cisco

  2. WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.CVE-2016-4657Apple · CVSS 8.8 · 67% likely

    CWE-787Apple

  3. The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.CVE-2016-4655Apple · CVSS 5.5 · 33% likely

    Apple

  4. The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.CVE-2016-4656Apple · CVSS 7.8 · 24% likely

    CWE-787Apple

  5. Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka B…CVE-2016-6367Cisco · CVSS 7.8 · 23% likely

    CWE-77Cisco

  6. The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Window…CVE-2016-3309Microsoft · CVSS 7.8 · 20% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in