KEV 2016

59 CISA Known Exploited Vulnerabilities from 2016

Critical 13

October 2025

July 2025

January 2024

May 2023

June 2022

March 2022

February 2022

November 2021

High 38

September 2024

June 2023

May 2023

June 2022

May 2022

April 2022

March 2022

CVE-2016-7200

Microsoft Edge — Microsoft Edge Memory Corruption Vulnerability

CVSS 8.8
CVE-2016-7201

Microsoft Edge — Microsoft Edge Memory Corruption Vulnerability

CVSS 8.8
CVE-2016-7892

Adobe Flash Player — Adobe Flash Player Use-After-Free Vulnerability

CVSS 8.8
CVE-2016-6277

NETGEAR Multiple Routers — NETGEAR Multiple Routers Remote Code Execution Vulnerability

CVSS 8.8
CVE-2016-7855

Adobe Flash Player — Adobe Flash Player Use-After-Free Vulnerability

CVSS 8.8
CVE-2016-0040

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

CVSS 7.8
CVE-2016-0151

Microsoft Client-Server Run-time Subsystem (CSRSS) — Microsoft Windows CSRSS Security Feature Bypass Vulnerability

CVSS 7.8
CVE-2016-3309

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

CVSS 7.8
CVE-2016-0099

Microsoft Windows — Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

CVSS 7.8
CVE-2016-7193

Microsoft Office — Microsoft Office Memory Corruption Vulnerability

CVSS 7.8
CVE-2016-7262

Microsoft Excel — Microsoft Office Security Feature Bypass Vulnerability

CVSS 7.8
CVE-2016-0189

Microsoft Internet Explorer — Microsoft Internet Explorer Memory Corruption Vulnerability

CVSS 7.5
CVE-2016-0752

Rails Ruby on Rails — Ruby on Rails Directory Traversal Vulnerability

CVSS 7.5
CVE-2016-8562

Siemens SIMATIC CP — Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

CVSS 7.5
CVE-2016-11021

D-Link DCS-930L Devices — D-Link DCS-930L Devices OS Command Injection Vulnerability

CVSS 7.2
CVE-2016-5195

Linux Kernel 'Dirty COW' — Copy-on-Write Race Condition Permits Unprivileged Write to Read-Only Memory-Mapped Files

CVSS 7

November 2021

Medium 8

June 2022

May 2022

November 2021