CVE-2016-7651

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The issue involves the "Accounts" component, which allows local users to bypass intended authorization restrictions by leveraging the mishandling of an app uninstall.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-285

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/94851Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037429
https://lists.apple.com/archives/security-announce/2016/Dec/msg00001.htmlMailing List, Vendor Advisory
https://support.apple.com/HT207422Vendor Advisory
https://support.apple.com/HT207487Vendor Advisory
http://www.securityfocus.com/bid/94851Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037429
https://lists.apple.com/archives/security-announce/2016/Dec/msg00001.htmlMailing List, Vendor Advisory
https://support.apple.com/HT207422Vendor Advisory
https://support.apple.com/HT207487Vendor Advisory

Timeline

Published: Feb 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016