Vulnerability
CVE-2016-0641
CVE-2016-0641 is a medium-severity vulnerability (CVSS v3.0 5.1). As of 2026-11-12, 8 647 hosts in our data show software it affects on an open service in at least 15 countries.
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.
- Published
- 2016-04-21
- Last modified
- 2026-06-17
- CVSS score
- 5.1 CVSS v3.0
- CVSS vector (v3.0)
- CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
- Exploit likelihood (EPSS)
- 1.5% in the next 30 days (top 25% of CVEs)
Exposure in our data
8 647 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 178 hosts with this CVE only from an older observation.
Not counted: 2 hosts where the software version is too vague to tell (only a major release).
Not counted: 131 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
369 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-11-12 04:20 UTC
By country
| China CN | 5 090 |
| United States US | 809 |
| South Korea KR | 597 |
| Japan JP | 314 |
| Hong Kong HK | 233 |
| India IN | 179 |
| Brazil BR | 178 |
| Russia RU | 165 |
| Türkiye TR | 165 |
| Taiwan TW | 124 |
| Singapore SG | 82 |
| Indonesia ID | 81 |
| Malaysia MY | 76 |
| Serbia RS | 59 |
| Sweden SE | 53 |
Affected software seen
| mysql 5.6.16 | 1 620 |
| mysql 5.5.18.1 | 772 |
| mysql 5.6.25 | 531 |
| mysql 5.6.21 | 324 |
| mysql 5.5.28 | 256 |
| mysql 5.5.3 | 207 |
| mysql 5.6.26 | 185 |
| mysql 5.6.17 | 182 |
| mysql 5.6.28 | 171 |
| mysql 5.5.40 | 168 |
| mysql 5.5.30 | 165 |
| mysql 5.6.24 | 164 |