AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-10226

HIGH · CVSS 7.5 EPSS 1.72%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-04-03 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Java. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2016-10226
Severity
HIGH
CVSS
7.5
EPSS
1.72%
Java

Original NVD Description

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds read and application crash) via crafted JavaScript code that is mishandled in the operatorString function, related to assembler/MacroAssemblerARM64.h, assembler/MacroAssemblerX86Common.h, and wasm/WasmB3IRGenerator.cpp.

Related CVEs

Other vulnerabilities affecting the same vendor(s)