CVE-2016-0185

Signals

NVD · CVE-2026-70618 · 4.3 · Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership bNVD · CVE-2026-70617 · 8.1 · Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary groupNVD · CVE-2026-70616 · 6.5 · boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, gorouNVD · CVE-2026-70615 · 9.9 · boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject aCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-70618 · 4.3 · Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership bNVD · CVE-2026-70617 · 8.1 · Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary groupNVD · CVE-2026-70616 · 6.5 · boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, gorouNVD · CVE-2026-70615 · 9.9 · boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject aCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07

CVE Database · CVE-2016-0185

CVE-2016-0185

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

69.94%

Published

May 10, 2016

Modified

Apr 22, 2026

CISA Known Exploited Vulnerability

Added: 2021-11-03 · Due: 2022-05-03

Apply updates per vendor instructions.

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBMicrosoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products (3)

microsoft · windows_7vulnerable

microsoft · windows_8.1vulnerable

microsoft · windows_vistavulnerable

References (11)

http://www.securityfocus.com/bid/90023

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1035832

Broken LinkThird Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-16-277

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059

PatchVendor Advisory

https://www.exploit-db.com/exploits/39805/

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs