Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-thma-h87d-muc1
Vulnerability ID VCID-thma-h87d-muc1
Aliases CVE-2016-0191
GHSA-j69r-w67w-gf35
Summary
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.18329 https://api.first.org/data/v1/epss?cve=CVE-2016-0191
epss 0.18329 https://api.first.org/data/v1/epss?cve=CVE-2016-0191
epss 0.18329 https://api.first.org/data/v1/epss?cve=CVE-2016-0191
epss 0.18329 https://api.first.org/data/v1/epss?cve=CVE-2016-0191
cvssv3.1 7.5 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-052
generic_textual HIGH https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-052
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-j69r-w67w-gf35
cvssv3.1 7.5 https://github.com/chakra-core/ChakraCore
generic_textual HIGH https://github.com/chakra-core/ChakraCore
cvssv3.1 7.5 https://github.com/chakra-core/ChakraCore/commit/d21529b131d831fc4470139bfc90d80ae7481fa2
generic_textual HIGH https://github.com/chakra-core/ChakraCore/commit/d21529b131d831fc4470139bfc90d80ae7481fa2
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2016-0191
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2016-0191
cvssv3.1 7.5 https://web.archive.org/web/20201024061334/http://www.securitytracker.com/id/1035821
generic_textual HIGH https://web.archive.org/web/20201024061334/http://www.securitytracker.com/id/1035821
cvssv3.1 7.5 https://web.archive.org/web/20210123133443/http://www.securityfocus.com/bid/90010
generic_textual HIGH https://web.archive.org/web/20210123133443/http://www.securityfocus.com/bid/90010
cvssv3.1 7.5 http://www.zerodayinitiative.com/advisories/ZDI-16-282
generic_textual HIGH http://www.zerodayinitiative.com/advisories/ZDI-16-282
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2016-0191
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-052
https://github.com/chakra-core/ChakraCore
https://github.com/chakra-core/ChakraCore/commit/d21529b131d831fc4470139bfc90d80ae7481fa2
https://nvd.nist.gov/vuln/detail/CVE-2016-0191
https://web.archive.org/web/20201024061334/http://www.securitytracker.com/id/1035821
https://web.archive.org/web/20210123133443/http://www.securityfocus.com/bid/90010
http://www.zerodayinitiative.com/advisories/ZDI-16-282
GHSA-j69r-w67w-gf35 https://github.com/advisories/GHSA-j69r-w67w-gf35
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-052
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/chakra-core/ChakraCore
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/chakra-core/ChakraCore/commit/d21529b131d831fc4470139bfc90d80ae7481fa2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2016-0191
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://web.archive.org/web/20201024061334/http://www.securitytracker.com/id/1035821
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://web.archive.org/web/20210123133443/http://www.securityfocus.com/bid/90010
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.zerodayinitiative.com/advisories/ZDI-16-282
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.95371
EPSS Score 0.18329
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:33:12.764267+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0