Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-qu2y-j7d2-auej
Vulnerability ID VCID-qu2y-j7d2-auej
Aliases CVE-2016-10156
Summary systemd: systemd creates world-writable suid files allowing root privilege escalation
Status Published
Exploitability 2.0
Weighted Severity 7.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-732 Incorrect Permission Assignment for Critical Resource
System Score Found at
cvssv3 7.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10156.json
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
epss 0.00712 https://api.first.org/data/v1/epss?cve=CVE-2016-10156
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10156.json
https://api.first.org/data/v1/epss?cve=CVE-2016-10156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10156
1416044 https://bugzilla.redhat.com/show_bug.cgi?id=1416044
CVE-2016-10156 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/41171.txt
CVE-2016-10156 Exploit http://www.openwall.com/lists/oss-security/2017/01/24/4
Data source Exploit-DB
Date added Jan. 26, 2017
Description Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) - Local Privilege Escalation
Ransomware campaign use Unknown
Source publication date Jan. 24, 2017
Exploit type local
Platform linux
Source update date March 7, 2019
Source URL http://www.openwall.com/lists/oss-security/2017/01/24/4
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10156.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.72221
EPSS Score 0.00712
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:32:10.056642+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10156.json 38.0.0