CVE-2016-1863

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4582 and CVE-2016-4653.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.htmlMailing List, Vendor Advisory
http://www.securityfocus.com/bid/91828Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036344Third Party Advisory, VDB Entry
https://support.apple.com/HT206902Vendor Advisory
https://support.apple.com/HT206903Vendor Advisory
https://support.apple.com/HT206904Vendor Advisory
https://support.apple.com/HT206905Vendor Advisory
https://www.exploit-db.com/exploits/40652/Exploit, Third Party Advisory, VDB Entry
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.htmlMailing List, Vendor Advisory
http://www.securityfocus.com/bid/91828Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036344Third Party Advisory, VDB Entry
https://support.apple.com/HT206902Vendor Advisory
https://support.apple.com/HT206903Vendor Advisory
https://support.apple.com/HT206904Vendor Advisory
https://support.apple.com/HT206905Vendor Advisory
https://www.exploit-db.com/exploits/40652/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jul 22, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-18644.3The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which al CVE-2016-18655.5The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial CVE-2016-18668.1Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arb CVE-2016-18676.5The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application cras CVE-2016-18767.8The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified CVE-2016-18797.5The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is co CVE-2016-18807.8The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentia CVE-2016-18817.8The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafte CVE-2016-18827.5FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors r CVE-2016-18837.8The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecifi CVE-2016-18856.2Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 CVE-2016-18867.8Integer signedness error in the genkbd_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17