AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-1155

CRITICAL · CVSS 9.8 EPSS 1.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-04-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2016-1155
Severity
CRITICAL
CVSS
9.8
EPSS
1.80%
Android

Original NVD Description

HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.

Related CVEs

Other vulnerabilities affecting the same vendor(s)