Is CVE-2016-3710 being actively exploited?

CVE-2016-3710 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2016-3710?

CVE-2016-3710 has a CVSS 3.1 base score of 8.8 (HIGH).

CVE-2016-3710

HIGH · CVSS 8.8EPSS 0.9%EU EUVD

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Key facts

CVSS score: 8.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-119
EPSS score: 0.9% (59th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2016-4731)
Published: May 11, 2016
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2016-4731 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
citrix / xenserver
debian / debian linux
hp / helion openstack
hp / helion openstack
hp / helion openstack
hp / helion openstack
oracle / linux
oracle / linux
oracle / linux
oracle / vm server
oracle / vm server
oracle / vm server
qemu / qemu
qemu / qemu
qemu / qemu
qemu / qemu
qemu / qemu
qemu / qemu
redhat / enterprise linux desktop
redhat / enterprise linux desktop
redhat / enterprise linux server
redhat / enterprise linux server
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server tus
redhat / enterprise linux server tus
redhat / enterprise linux server tus
redhat / enterprise linux server tus
redhat / enterprise linux workstation
redhat / enterprise linux workstation
redhat / openstack
redhat / openstack
redhat / openstack
redhat / openstack
redhat / virtualization

Certified products that may be affected

29 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Oracle Linux 7 NSS Cryptographic Module - Oracle Corporation - FIPS 140 4586 - historical
Oracle Linux 7 Libreswan Cryptographic Module - Oracle Corporation - FIPS 140 4266 - historical
Oracle Linux 7 OpenSSH Client Cryptographic Module - Oracle Corporation - FIPS 140 4206 - historical
Oracle Linux 7 OpenSSH Server Cryptographic Module - Oracle Corporation - FIPS 140 4176 - historical
Oracle Linux 7 Unbreakable Enterprise Kernel (UEK 6) Cryptographic Module - Oracle Corporation - FIPS 140 4169 - historical

See all 29 in the Security Certifications Explorer.

References

http://rhn.redhat.com/errata/RHSA-2016-0724.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-0725.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-0997.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-0999.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-1000.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-1001.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-1002.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-1019.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-1943.html(Third Party Advisory)
http://support.citrix.com/article/CTX212736(Third Party Advisory)
http://www.debian.org/security/2016/dsa-3573(Third Party Advisory)
http://www.openwall.com/lists/oss-security/2016/05/09/3(Mailing List, Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html(Third Party Advisory)
http://www.securityfocus.com/bid/90316(Third Party Advisory, VDB Entry)
http://www.securitytracker.com/id/1035794(Third Party Advisory, VDB Entry)
http://www.ubuntu.com/usn/USN-2974-1(Third Party Advisory)
http://xenbits.xen.org/xsa/advisory-179.html(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2016:1224(Third Party Advisory)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862(Third Party Advisory, Vendor Advisory)
https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01197.html(Mailing List, Patch, Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain