{"id":"CVE-2016-1584","aliases":["EUVD-2016-2679","GHSA-f5qf-4744-w4vg","UBUNTU-CVE-2016-1584"],"status":"published","title":"Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most","description":"In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.","severity":{"version":"3.0","score":1.6,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00883,"percentile":0.59433,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-399"],"published":"2019-04-22T15:35:59Z","modified":"2026-10-17T12:52:32Z","affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtmir","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.6+15.10.20151008.2-0ubuntu1","0.4.6+15.10.20151021-0ubuntu1","0.4.6+16.04.20151102-0ubuntu1","0.4.6+16.04.20151113-0ubuntu1","0.4.6+16.04.20151119-0ubuntu1","0.4.6+16.04.20151125-0ubuntu1","0.4.6+16.04.20151125-0ubuntu2","0.4.7+16.04.20151210-0ubuntu1","0.4.7+16.04.20151222-0ubuntu1","0.4.7+16.04.20160104-0ubuntu1","0.4.7+16.04.20160122-0ubuntu1","0.4.7+16.04.20160127.1-0ubuntu1","0.4.7+16.04.20160208-0ubuntu1","0.4.7+16.04.20160212-0ubuntu1","0.4.7+16.04.20160219-0ubuntu1","0.4.7+16.04.20160310.1-0ubuntu1","0.4.8+16.04.20160322.1-0ubuntu1","0.4.8+16.04.20160329.1-0ubuntu1","0.4.8+16.04.20160330-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtmir","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.0~git20230223.bd21224-3ubuntu3","0.8.0~git20240131.2f99df3-1","0.8.0~git20240131.2f99df3-1build3","0.8.0~git20240131.2f99df3-1build4","0.8.0~git20240131.2f99df3-1build5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtmir","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.0~git20250305.794fa12-1","0.8.0~git20250407.ea2f477-1","0.8.0~git20250407.ea2f477-1build1","0.8.0~git20250407.ea2f477-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtmir","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.0~git20260226.fb30a11-3","0.8.0~git20260226.fb30a11-4","0.8.0~git20260226.fb30a11-5","0.8.0~git20260226.fb30a11-8","0.8.0~git20260226.fb30a11-9"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qtmir","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.0~git20250407.ea2f477-2","0.8.0~git20250407.ea2f477-6","0.8.0~git20250407.ea2f477-7","0.8.0~git20250407.ea2f477-7build2","0.8.0~git20250407.ea2f477-8","0.8.0~git20260226.fb30a11-1","0.8.0~git20260226.fb30a11-2","0.8.0~git20260226.fb30a11-3","0.8.0~git20260226.fb30a11-3ubuntu0.1"]}],"products":[{"vendor":"ubuntu","product":"unity8"},{"vendor":"unity8","product":"unity8"}],"references":[{"url":"https://bazaar.launchpad.net/~mir-team/qtmir/trunk/revision/521","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1584"},{"url":"https://github.com/advisories/GHSA-f5qf-4744-w4vg"},{"url":"https://ubuntu.com/security/CVE-2016-1584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1584","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-1584","title":"Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most","description":"In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.","status":"published","published":"2019-04-22T15:35:59.533Z","modified":"2024-09-17T03:22:49.16Z","cvss":[{"version":"3.0","score":1.6,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-2679","description":"In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.","status":"published","published":"2019-04-22T15:35:59Z","modified":"2024-09-17T03:22:49Z","cvss":[{"version":"3.0","score":1.6,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T00:28:32.482778Z"}],"ghsa":[{"id":"GHSA-f5qf-4744-w4vg","title":"In all versions of Unity8 a running but not active application on a large-screen device could...","description":"In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.","status":"published","published":"2022-05-24T16:44:08Z","modified":"2024-04-04T00:03:27Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T14:55:48.925076Z"}],"nvd":[{"id":"CVE-2016-1584","description":"In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.","status":"published","published":"2019-04-22T16:29:01.24Z","modified":"2026-06-17T00:42:12.917Z","cvss":[{"version":"3.0","score":1.6,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"UBUNTU-CVE-2016-1584","description":"In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.","status":"published","published":"2019-04-22T16:29:00Z","modified":"2026-10-17T12:52:32.724990254Z","cvss":[{"version":"3.0","score":1.6,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:11.492576Z"}]}}