57.288 CVE tracked
779 Exploited now
184 Used by ransomware
Last sync
CVE Tracker
57.288 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2016-9191 | MED 5.5 | linux linux_kernel The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, a | 0.4% | — |
| CVE-2016-9178 | MED 5.5 | linux linux_kernel The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user | 0.4% | — |
| CVE-2016-8981 | MED 5.5 | ibm bigfix_inventory IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. | 0.3% | — |
| CVE-2016-8967 | MED 5.5 | ibm bigfix_inventory IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user. | 0.3% | — |
| CVE-2016-8963 | MED 5.5 | ibm bigfix_inventory IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user. | 0.3% | — |
| CVE-2016-8826 | MED 5.5 | nvidia gpu_driver All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) where a user can cause a GPU interrupt storm, leading to a denial of service. | 0.4% | — |
| CVE-2016-8660 | MED 5.5 | linux linux_kernel The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implement | 0.3% | — |
| CVE-2016-8650 | MED 5.5 | linux linux_kernel The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RS | 0.4% | — |
| CVE-2016-8646 | MED 5.5 | linux linux_kernel The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data. | 0.4% | — |
| CVE-2016-8645 | MED 5.5 | linux linux_kernel The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c. | 0.5% | — |
| CVE-2016-8630 | MED 5.5 | linux linux_kernel The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction. | 0.4% | — |
| CVE-2016-8483 | MED 5.5 | linux linux_kernel An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user | 1.0% | — |
| CVE-2016-8463 | MED 5.5 | linux linux_kernel A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android | 1.2% | — |
| CVE-2016-8461 | MED 5.5 | linux linux_kernel An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Andr | 0.3% | — |
| CVE-2016-8460 | MED 5.5 | linux linux_kernel An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user p | 0.8% | — |
| CVE-2016-8400 | MED 5.5 | linux linux_kernel An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without | 0.9% | — |
| CVE-2016-8397 | MED 5.5 | linux linux_kernel An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user p | 1.1% | — |
| CVE-2016-7916 | MED 5.5 | linux linux_kernel Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-var | 0.4% | — |
| CVE-2016-7915 | MED 5.5 | linux linux_kernel The hid_input_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstr | 1.7% | — |
| CVE-2016-7914 | MED 5.5 | linux linux_kernel The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.5.3 does not check whether a slot is a leaf, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid | 2.0% | — |
| CVE-2016-7474 | MED 5.5 | f5 big-ip_access_policy_manager In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information. | 0.4% | — |
| CVE-2016-7386 | MED 5.5 | nvidia gpu_driver For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of ke | 1.4% | — |
| CVE-2016-7295 | MED 5.5 | microsoft windows_10 The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local user | 2.7% | — |
| CVE-2016-7267 | MED 5.5 | microsoft excel Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability." | 19.4% | — |
| CVE-2016-7258 | MED 5.5 | microsoft windows_10 The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address | 2.7% | — |