First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component, which allows attackers to obtain sensitive information from kernel memory via a crafted app.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iStyle @cosme iPhone OS | <=10.1.1 | |
Apple iOS and macOS | <=10.12.1 | |
Apple iOS, iPadOS, and watchOS | <=2.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-7607 is rated as a high-severity vulnerability due to the potential for exposing sensitive information from kernel memory.
To fix CVE-2016-7607, you should update your affected Apple devices to the latest versions of iOS, macOS, or watchOS.
CVE-2016-7607 affects certain Apple products including iOS versions before 10.2, macOS versions before 10.12.2, and watchOS versions before 3.1.3.
CVE-2016-7607 is a memory exposure vulnerability that allows attackers to retrieve sensitive information from the kernel.
CVE-2016-7607 requires local access or execution of a crafted application, meaning it is not an externally exploitable vulnerability.