# Vulnerabilities published in 2016


- [CVE-2016-1667](https://insights.sbomify.com/CVE-2016-1667/): Security feature bypass in debian:debian linux (high 8.8)
- [CVE-2016-1666](https://insights.sbomify.com/CVE-2016-1666/): Other in google:chrome (critical 9.8)
- [CVE-2016-1665](https://insights.sbomify.com/CVE-2016-1665/): Information disclosure in google:chrome (medium 6.5)
- [CVE-2016-1664](https://insights.sbomify.com/CVE-2016-1664/): Security feature bypass in google:chrome (medium 4.3)
- [CVE-2016-1663](https://insights.sbomify.com/CVE-2016-1663/): Use after free in google:chrome (high 8.8)
- [CVE-2016-1662](https://insights.sbomify.com/CVE-2016-1662/): Use after free in google:chrome (critical 9.8)
- [CVE-2016-1661](https://insights.sbomify.com/CVE-2016-1661/): Memory corruption in google:chrome (high 8.0)
- [CVE-2016-1660](https://insights.sbomify.com/CVE-2016-1660/): Memory corruption in google:chrome (high 8.8)
- [CVE-2016-1659](https://insights.sbomify.com/CVE-2016-1659/): Other in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-1658](https://insights.sbomify.com/CVE-2016-1658/): Security feature bypass in debian:debian linux (medium 4.3)
- [CVE-2016-1657](https://insights.sbomify.com/CVE-2016-1657/): Security feature bypass in debian:debian linux (medium 4.3)
- [CVE-2016-1656](https://insights.sbomify.com/CVE-2016-1656/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2016-1655](https://insights.sbomify.com/CVE-2016-1655/): Use after free in canonical:ubuntu linux (high 8.8)
- [CVE-2016-1654](https://insights.sbomify.com/CVE-2016-1654/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-1653](https://insights.sbomify.com/CVE-2016-1653/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-1652](https://insights.sbomify.com/CVE-2016-1652/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2016-1651](https://insights.sbomify.com/CVE-2016-1651/): Memory corruption in debian:debian linux (high 8.1)
- [CVE-2016-1650](https://insights.sbomify.com/CVE-2016-1650/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2016-1649](https://insights.sbomify.com/CVE-2016-1649/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-1648](https://insights.sbomify.com/CVE-2016-1648/): Use after free in debian:debian linux (high 8.8)
- [CVE-2016-1647](https://insights.sbomify.com/CVE-2016-1647/): Use after free in canonical:ubuntu linux (high 8.8)
- [CVE-2016-1646](https://insights.sbomify.com/CVE-2016-1646/): Google Chromium V8 Out-of-Bounds Read (high 8.8, exploited in the wild)
- [CVE-2016-1645](https://insights.sbomify.com/CVE-2016-1645/): Integer overflow in debian:debian linux (high 8.8)
- [CVE-2016-1644](https://insights.sbomify.com/CVE-2016-1644/): Use after free in google:chrome (high 8.8)
- [CVE-2016-1643](https://insights.sbomify.com/CVE-2016-1643/): Memory corruption in google:chrome (high 8.8)
- [CVE-2016-1642](https://insights.sbomify.com/CVE-2016-1642/): Other in google:chrome (critical 9.8)
- [CVE-2016-1641](https://insights.sbomify.com/CVE-2016-1641/): Use after free in google:chrome (high 8.8)
- [CVE-2016-1640](https://insights.sbomify.com/CVE-2016-1640/): Security feature bypass in google:chrome (medium 4.3)
- [CVE-2016-1639](https://insights.sbomify.com/CVE-2016-1639/): Use after free in google:chrome (critical 9.8)
- [CVE-2016-1638](https://insights.sbomify.com/CVE-2016-1638/): Security feature bypass in google:chrome (medium 6.3)
- [CVE-2016-1637](https://insights.sbomify.com/CVE-2016-1637/): Information disclosure in google:chrome (medium 6.5)
- [CVE-2016-1636](https://insights.sbomify.com/CVE-2016-1636/): Security feature bypass in google:chrome (critical 9.8)
- [CVE-2016-1635](https://insights.sbomify.com/CVE-2016-1635/): Use after free in google:chrome (critical 9.8)
- [CVE-2016-1634](https://insights.sbomify.com/CVE-2016-1634/): Use after free in google:chrome (high 8.8)
- [CVE-2016-1633](https://insights.sbomify.com/CVE-2016-1633/): Use after free in google:chrome (critical 9.8)
- [CVE-2016-1632](https://insights.sbomify.com/CVE-2016-1632/): Security feature bypass in google:chrome (high 8.8)
- [CVE-2016-1631](https://insights.sbomify.com/CVE-2016-1631/): Security feature bypass in google:chrome (high 8.8)
- [CVE-2016-1630](https://insights.sbomify.com/CVE-2016-1630/): Security feature bypass in google:chrome (high 8.8)
- [CVE-2016-1629](https://insights.sbomify.com/CVE-2016-1629/): Security feature bypass in debian:debian linux (critical 9.8)
- [CVE-2016-1628](https://insights.sbomify.com/CVE-2016-1628/): Memory corruption in debian:debian linux (medium 6.3)
- [CVE-2016-1627](https://insights.sbomify.com/CVE-2016-1627/): Security feature bypass in debian:debian linux (high 8.8)
- [CVE-2016-1626](https://insights.sbomify.com/CVE-2016-1626/): Memory corruption in debian:debian linux (medium 4.3)
- [CVE-2016-1625](https://insights.sbomify.com/CVE-2016-1625/): Security feature bypass in debian:debian linux (medium 4.3)
- [CVE-2016-1624](https://insights.sbomify.com/CVE-2016-1624/): Integer overflow in debian:debian linux (high 8.8)
- [CVE-2016-1623](https://insights.sbomify.com/CVE-2016-1623/): Security feature bypass in debian:debian linux (high 8.8)
- [CVE-2016-1622](https://insights.sbomify.com/CVE-2016-1622/): Security feature bypass in debian:debian linux (high 8.8)
- [CVE-2016-1621](https://insights.sbomify.com/CVE-2016-1621/): Memory corruption in google:android (critical 9.8)
- [CVE-2016-1620](https://insights.sbomify.com/CVE-2016-1620/): Other in google:chrome (high 8.8)
- [CVE-2016-1619](https://insights.sbomify.com/CVE-2016-1619/): Integer overflow in google:chrome (high 7.6)
- [CVE-2016-1618](https://insights.sbomify.com/CVE-2016-1618/): Weak cryptography in google:chrome (medium 6.5)
- [CVE-2016-1617](https://insights.sbomify.com/CVE-2016-1617/): Information disclosure in google:chrome (medium 4.3)
- [CVE-2016-1616](https://insights.sbomify.com/CVE-2016-1616/): Security feature bypass in google:chrome (medium 4.3)
- [CVE-2016-1615](https://insights.sbomify.com/CVE-2016-1615/): Security feature bypass in google:chrome (medium 6.5)
- [CVE-2016-1614](https://insights.sbomify.com/CVE-2016-1614/): Information disclosure in google:chrome (medium 4.3)
- [CVE-2016-1613](https://insights.sbomify.com/CVE-2016-1613/): Use after free in google:chrome (high 7.6)
- [CVE-2016-1612](https://insights.sbomify.com/CVE-2016-1612/): Memory corruption in google:chrome (high 7.6)
- [CVE-2016-1611](https://insights.sbomify.com/CVE-2016-1611/): Misconfiguration in novell:filr (high 7.8)
- [CVE-2016-1610](https://insights.sbomify.com/CVE-2016-1610/): Path traversal in novell:filr (high 7.5)
- [CVE-2016-1609](https://insights.sbomify.com/CVE-2016-1609/): Cross-site scripting in novell:filr (medium 5.4)
- [CVE-2016-1608](https://insights.sbomify.com/CVE-2016-1608/): Command injection in novell:filr (high 8.8)
- [CVE-2016-1607](https://insights.sbomify.com/CVE-2016-1607/): Cross-site request forgery in novell:filr (high 7.2)
- [CVE-2016-1606](https://insights.sbomify.com/CVE-2016-1606/): Memory corruption in microfocus:rumba (critical 9.8)
- [CVE-2016-1605](https://insights.sbomify.com/CVE-2016-1605/): Path traversal in netiq:sentinel (medium 6.5)
- [CVE-2016-1603](https://insights.sbomify.com/CVE-2016-1603/): Information disclosure in NetIQ IDM ServiceNow (medium 6.5)
- [CVE-2016-1602](https://insights.sbomify.com/CVE-2016-1602/): Code injection in supportconfig (high 7.8)
- [CVE-2016-1601](https://insights.sbomify.com/CVE-2016-1601/): Misconfiguration in suse:yast2 (critical 9.8)
- [CVE-2016-1600](https://insights.sbomify.com/CVE-2016-1600/): Information disclosure in Identity Manager (high 7.5)
- [CVE-2016-1599](https://insights.sbomify.com/CVE-2016-1599/): Cross-site scripting in microfocus:self service password reset (medium 6.1)
- [CVE-2016-1598](https://insights.sbomify.com/CVE-2016-1598/): Cross-site scripting in NetIQ IDM 4.5 Identity Applications before 4.5.4 (medium 5.4)
- [CVE-2016-1597](https://insights.sbomify.com/CVE-2016-1597/): Privilege escalation in Access Governance Suite (high 8.8)
- [CVE-2016-1596](https://insights.sbomify.com/CVE-2016-1596/): Cross-site scripting in novell:service desk (medium 5.4)
- [CVE-2016-1595](https://insights.sbomify.com/CVE-2016-1595/): SQL injection in novell:service desk (medium 6.5)
- [CVE-2016-1594](https://insights.sbomify.com/CVE-2016-1594/): Missing authorization in novell:service desk (medium 6.5)
- [CVE-2016-1593](https://insights.sbomify.com/CVE-2016-1593/): Path traversal in novell:service desk (high 7.2)
- [CVE-2016-1592](https://insights.sbomify.com/CVE-2016-1592/): Cross-site scripting in NetIQ Designer for Identity Manager before 4.5.3 (medium 6.1)
- [CVE-2016-1587](https://insights.sbomify.com/CVE-2016-1587/): Missing authorization in snapweb (high 7.1)
- [CVE-2016-1586](https://insights.sbomify.com/CVE-2016-1586/): Use after free in Oxide (low 1.8)
- [CVE-2016-1585](https://insights.sbomify.com/CVE-2016-1585/): AppArmor mount rules grant excessive permissions (low 3.9)
- [CVE-2016-1584](https://insights.sbomify.com/CVE-2016-1584/): Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most (low 1.6)
- [CVE-2016-1583](https://insights.sbomify.com/CVE-2016-1583/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2016-1582](https://insights.sbomify.com/CVE-2016-1582/): Misconfiguration in canonical:lxd (medium 5.5)
- [CVE-2016-1581](https://insights.sbomify.com/CVE-2016-1581/): Misconfiguration in canonical:lxd (medium 5.5)
- [CVE-2016-1580](https://insights.sbomify.com/CVE-2016-1580/): Privilege escalation in canonical:ubuntu-core-launcher (critical 9.8)
- [CVE-2016-1579](https://insights.sbomify.com/CVE-2016-1579/): UDM doesn't check for confinement before running post-processing commands (medium 6.7)
- [CVE-2016-1578](https://insights.sbomify.com/CVE-2016-1578/): Use after free in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-1577](https://insights.sbomify.com/CVE-2016-1577/): Memory corruption in canonical:ubuntu linux (high 7.6)
- [CVE-2016-1576](https://insights.sbomify.com/CVE-2016-1576/): Privilege escalation in canonical:ubuntu core (high 7.8)
- [CVE-2016-1575](https://insights.sbomify.com/CVE-2016-1575/): Privilege escalation in canonical:ubuntu core (high 7.8)
- [CVE-2016-1573](https://insights.sbomify.com/CVE-2016-1573/): Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash (medium 4.8)
- [CVE-2016-1572](https://insights.sbomify.com/CVE-2016-1572/): Privilege escalation in canonical:ubuntu linux (high 8.4)
- [CVE-2016-1571](https://insights.sbomify.com/CVE-2016-1571/): Denial of service in citrix:xenserver (medium 6.3)
- [CVE-2016-1570](https://insights.sbomify.com/CVE-2016-1570/): Memory corruption in xen:xen (high 8.5)
- [CVE-2016-1569](https://insights.sbomify.com/CVE-2016-1569/): Denial of service in firebirdsql:firebird (medium 6.5)
- [CVE-2016-1568](https://insights.sbomify.com/CVE-2016-1568/): Use after free in debian:debian linux (high 8.8)
- [CVE-2016-1567](https://insights.sbomify.com/CVE-2016-1567/): Auth bypass in tuxfamily:chrony (high 8.1)
- [CVE-2016-1566](https://insights.sbomify.com/CVE-2016-1566/): Cross-site scripting in apache:guacamole (medium 5.4)
- [CVE-2016-1565](https://insights.sbomify.com/CVE-2016-1565/): Cross-site scripting in field group project:field group (medium 6.1)
- [CVE-2016-1564](https://insights.sbomify.com/CVE-2016-1564/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2016-1563](https://insights.sbomify.com/CVE-2016-1563/): Weak cryptography in netapp:clustered data ontap (medium 6.8)
- [CVE-2016-1562](https://insights.sbomify.com/CVE-2016-1562/): SQL injection in dte energy:insight (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/68/