CVE-2016-7651: Medium severity Apple iPhone OS vulnerability
An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The issue involves the "Accounts" component, which allows local users to bypass intended authorization restrictions by leveraging the mishandling of an app uninstall.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7651?
CVE-2016-7651 has been rated as having a medium severity due to its ability to allow local users to bypass intended authorization restrictions.
How do I fix CVE-2016-7651?
To fix CVE-2016-7651, ensure that your device is updated to iOS 10.2 or later for iPhone devices and watchOS 3.1.1 or later for Apple Watch.
Which versions of iOS are affected by CVE-2016-7651?
CVE-2016-7651 affects versions of iOS prior to 10.2.
Which versions of watchOS are impacted by CVE-2016-7651?
CVE-2016-7651 affects watchOS versions prior to 3.1.1.
What component does CVE-2016-7651 involve?
CVE-2016-7651 involves the 'Accounts' component, which is vulnerable due to mishandling during app uninstall.