CVE-2016-1000004: facebook hhvm – CVSS 9.8 · Watchpost