Skip to content

November 2016 · Band 1

Exploited in the wild

8 CVEs · 8 exploited

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
8

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature…CVE-2016-5195Linux · CVSS 7 · 84% likely

    CWE-362Linux

  2. The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,…CVE-2016-7200Microsoft · CVSS 8.8 · 83% likely

    CWE-787Microsoft

  3. The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…CVE-2016-7255Microsoft · CVSS 7.8 · 81% likely

    MicrosoftOceanLotus

  4. The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,…CVE-2016-7201Microsoft · CVSS 8.8 · 80% likely

    CWE-843Microsoft

  5. atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8…CVE-2016-7256Microsoft · CVSS 8.8 · 65% likely

    Microsoft

  6. Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via uns…CVE-2016-7855Adobe · CVSS 8.8 · 25% likely

    CWE-416Adobe

  7. BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwl…CVE-2016-9563SAP · CVSS 6.5 · 24% likely

    CWE-611SAP

  8. A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write…CVE-2016-8562Siemens · CVSS 7.5 · 3.6% likely

    Siemens

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.