What’s Vulnerable › Vulnerabilities

CVE-2016-3498

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-07-21 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.

Affected products

• Oracle Java SE: 1.7.0-update101, 1.8.0-update92
• Oracle Java SE: 1.7.0-update101, 1.8.0-update92

References

• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
• http://www.securityfocus.com/bid/91787
• http://www.securityfocus.com/bid/91956
• http://www.securitytracker.com/id/1036365
• https://access.redhat.com/errata/RHSA-2016:1475

Get alerted when CVE-2016-3498 or the next vulnerability affects your stack