← back
CVE-2016-6754

CVE-2016-6754

EPSS 4.6%
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.
Affected products
Google Inc. · Android
public PoCs found — 3
githubgithub.com/secmob/BadKernel★ 151cve_referencewww.exploit-db.com/exploits/40846/unverifiedexploitdbwww.exploit-db.com/exploits/40846unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://source.android.com/security/bulletin/2016-11-01.htmlhttps://www.exploit-db.com/exploits/40846/http://www.securityfocus.com/bid/94204