CVE-2016-6754
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 4.6%
from disclosure to weapon3 days
Published on NVDNov 25
1st PoC+3d
exploitation probability
4.6%top 9% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.
Affected products
Google Inc. · Androidpublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/40846unverifiedgithubgithub.com/secmob/BadKernel★ 151cve_referencewww.exploit-db.com/exploits/40846/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.