Exploited Vulnerabilities DailyCVE-2016-3715: ImageMagick ImageMagick
EPSS75.3%No. 673 of 1739 in KEV
CVE year2016~5 yrs before listing
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | ImageMagick |
| Product | ImageMagick |
| Name | ImageMagick Arbitrary File Deletion Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-284 |
CISA description
ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2016-3714 | ImageMagick ImageMagick | 2024-09-09 | 97.4% | Unknown |
| CVE-2016-3718 | ImageMagick ImageMagick | 2021-11-03 | 76.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A ImageMagick ImageMagick vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.