What’s Vulnerable › Vulnerabilities

CVE-2016-1584: Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-22 · updated 2026-06-17
• Weakness: CWE-399

Description

In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.

Affected products

• Unity8: all versions

References

• https://bazaar.launchpad.net/~mir-team/qtmir/trunk/revision/521
• https://bazaar.launchpad.net/~mir-team/qtmir/trunk/revision/521

Get alerted when CVE-2016-1584 or the next vulnerability affects your stack