Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-6754

Опубликовано: 25 нояб. 2016
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Средний

Описание

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия до 6.0.1 (включая)
cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.28454
Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.

CVSS3: 8.8
github
больше 3 лет назад

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.

fstec
около 9 лет назад

Уязвимость операционной системы Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 96%
0.28454
Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-74