CVE Watch—

CVE-2016-3715

ImageMagick Arbitrary File Deletion Vulnerability

CVSS

—

No CVSS

EPSS

75.4%

p99

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

75.4%EPSS · 30 days75.4%

2026-06-302026-07-16

KEV catalog record

Product

ImageMagick / ImageMagick

Vulnerability

ImageMagick Arbitrary File Deletion Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-3715

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-3714—

99.9%

KEV—80ImageMagick Improper Input Validation Vulnerability—CVE-2016-3718—

99.5%

KEV—80ImageMagick Server-Side Request Forgery (SSRF) Vulnerability—