CVE-2018-16266

The Enlightenment system service in Tizen allows an unprivileged process to fully control or...

8.1 High

CVE-2018-16266 is a high vulnerability (CVSS 8.1) in Linux Tizen, published January 22, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. No source names a fixed version.

The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

0.70%Down 0.1 points since Apr 14, 2021

What each source reports

NVD Score used 8.1

Record: CVE-2018-16266
CVSS 3.1: 8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0: 4.8 MediumAV:A/AC:L/Au:N/C:P/I:P/A:N
Weakness: CWE-269
Updated: 2026-11-02

CVE List No score

Record: CVE-2018-16266
Updated: 2026-11-02

EUVDEUVD-2018-8118 No score

Record: EUVD-2018-8118
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h9xw-2mh8-hx46 No score

The Enlightenment system service in Tizen allows an unprivileged process to fully control or...

Record: GHSA-h9xw-2mh8-hx46
Updated: 2026-11-02

Affected products

linux tizen

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD