CVE catalog

CVE-2016-3587

UBUNTU-CVE-2016-3587

Severity: Critical · CVSS 9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Published: Jul 19, 2016, 12:00:00 AM UTC
Updated: Feb 4, 2026, 4:35:46 AM UTC
Source: [NVD] · [CVE record]
EPSS: 5.93% · Oct 25, 2026

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	openjdk-8	16.04	`8u66-b01-5`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b05-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b05-5`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b05-6`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-2ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-2ubuntu3`	vulnerable
Ubuntu	openjdk-8	16.04	`8u72-b15-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-1ubuntu2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-3ubuntu2`	vulnerable
Ubuntu	openjdk-8	16.04	`8u77-b03-3ubuntu3`	vulnerable
Ubuntu	openjdk-8	16.04	`8u91-b14-0ubuntu4~16.04.1`	vulnerable
Ubuntu	openjdk-8	16.04	`8u91-b14-3ubuntu1~16.04.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Ubuntu	openjdk-8	deb	16.04	`8u91-b14-3ubuntu1~16.04.1`	Not reported	UBUNTU-CVE-2016-3587	Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 4:41:35 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]