Get real-time updates on Telegram
CVE-2016-10195, CVE-2016-10196, CVE-2016-10197 +30 more CVEs: debian linux 8.0; +12 more affected products
CVE-2016-10195, CVE-2016-10196, CVE-2016-10197, CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5449, CVE-2017-5451, CVE-2017-5454, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5469 affects thunderbird. EPSS 0.06681 (percentile 0.93871), scored 21-Oct-2026.
CVE-2016-10195
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2016-10196
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2016-10197
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5429
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5430
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5432
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5433
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5434
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5435
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5436
Affected technology
debian linux · 8.0
debian
enterprise linux · 6.0
redhat
enterprise linux · 7.0
redhat
enterprise linux desktop · 6.0
redhat
enterprise linux desktop · 7.0
redhat
enterprise linux server · 6.0
redhat
enterprise linux server · 7.0
redhat
enterprise linux server aus · 7.3
redhat
enterprise linux server aus · 7.4
redhat
enterprise linux server eus · 7.3
redhat
enterprise linux server eus · 7.4
redhat
enterprise linux server eus · 7.5
redhat
enterprise linux workstation · 6.0
redhat
enterprise linux workstation · 7.0
redhat
graphite2 · before 1.3.10 (exclusive)
sil
firefox · before 45.9.0 (exclusive)
mozilla
firefox · from 46.0 (inclusive), before 52.1.0 (exclusive)
mozilla
thunderbird · before 52.1.0 (exclusive)
mozilla
Thunderbird · unspecified to before 52.1
Mozilla
Firefox ESR · unspecified to before 45.9, unspecified to before 52.1
Mozilla
Firefox · unspecified to before 53
Mozilla
Component: Not specified by the source
Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2017-5437
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5438
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5439
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5440
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5441
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5442
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5443
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5444
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5445
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5446
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5447
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5449
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5451
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5454
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5459
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5460
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5461
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5462
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5464
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5465
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5466
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5467
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2017-5469
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- CVE
- CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5449, CVE-2017-5451, CVE-2017-5454, CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5462, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5469
- CWE
- CWE-787
- Product
- thunderbird
- CCR priority
- 1.7 /100 (P5)
- EPSS
- 0.06681 · percentile 0.93871 · 2026-10-21
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-22 12:21:37.944032+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2016-10195.html