Skip to content
BackEsc
Connect AISign inSign up free

No weakness recorded · 2016

No weakness recorded: 2016

1,084 CVEs · 19 exploited

Every dot is a CVE whose record names no weakness (CWE), published in 2016. The named ones are the most at risk.

Connect AI

exploited in the wild
19
check available
2
likely to be exploited
82

Every one of the 1,084 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.CVE-2016-4117Adobe · CVSS 7.8 · 94% likely

    AdobeAPT37

  2. The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…CVE-2016-7255Microsoft · CVSS 7.8 · 81% likely

    MicrosoftOceanLotus

  3. Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka…CVE-2016-0185Microsoft · CVSS 7.8 · 70% likely

    Microsoft

  4. Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (objec…CVE-2016-0034Microsoft · CVSS 8.8 · 69% likely

    Microsoft

  5. Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Window…CVE-2016-3393Microsoft · CVSS 7.8 · 68% likely

    Microsoft

  6. atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8…CVE-2016-7256Microsoft · CVSS 8.8 · 65% likely

    Microsoft

  7. Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to ex…CVE-2016-7262Microsoft · CVSS 7.8 · 59% likely

    Microsoft

  8. Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain priv…CVE-2016-3235Microsoft · CVSS 7.8 · 43% likely

    Microsoft

  9. The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.CVE-2016-4655Apple · CVSS 5.5 · 33% likely

    Apple

  10. Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to deter…CVE-2016-3298Microsoft · CVSS 6.5 · 33% likely

    Microsoft

  11. Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Discl…CVE-2016-3351Microsoft · CVSS 6.5 · 26% likely

    Microsoft

  12. The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elev…CVE-2016-0040Microsoft · CVSS 7.8 · 24% likely

    Microsoft

  13. Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as e…CVE-2016-1019Adobe · CVSS 7.8 · 22% likely

    Adobe

  14. Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vul…CVE-2016-0162Microsoft · CVSS 4.3 · 22% likely

    Microsoft

  15. The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Window…CVE-2016-3309Microsoft · CVSS 7.8 · 20% likely

    Microsoft

  16. Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.CVE-2016-4171Adobe · CVSS 7.8 · 20% likely

    Adobe

  17. The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows…CVE-2016-0165Microsoft · CVSS 7.8 · 14% likely

    Microsoft

  18. The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows…CVE-2016-0167Microsoft · CVSS 7.8 · 5.7% likely

    MicrosoftFIN8

  19. A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write…CVE-2016-8562Siemens · CVSS 7.5 · 3.6% likely

    Siemens

  20. Oracle WebLogic Server Java Object Deserialization - Remote Code ExecutionCVE-2016-3510Oracle · 91% likely

    Oracle

  21. Adobe AEM Dispatcher <4.15 - Rules BypassCVE-2016-0957Adobe · 51% likely

    Adobe

  22. Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileU…CVE-2016-1524Netgear · 94% likely

    NETGEAR

  23. Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confi…CVE-2016-0492Oracle · 92% likely

    Oracle

  24. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Interne…CVE-2016-0041Microsoft · 83% likely

    Microsoft

  25. Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integ…CVE-2016-0491Oracle · 80% likely

    Oracle

  26. Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows…CVE-2016-0854Advantech · 77% likely

    Advantech

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated