CVE-2016-3503

Severity: high (CVSS 7.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-21 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

Affected products

Oracle Java SE: 1.6.0-update115, 1.7.0-update101, 1.8.0-update92
Oracle Java SE: 1.6.0-update115, 1.7.0-update101, 1.8.0-update92

References

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
http://www.securityfocus.com/bid/91787
http://www.securityfocus.com/bid/91996
http://www.securitytracker.com/id/1036365
https://access.redhat.com/errata/RHSA-2016:1475

Get alerted when CVE-2016-3503 or the next vulnerability affects your stack