CVE-2016-4753

High

Published: 25/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, allowing attackers to execute arbitrary code in a privileged context via a crafted app.

Risk Assessment

This vulnerability could lead to system compromise by malicious applications, posing a serious threat to user data security.

Recommendation

It is recommended to update operating systems to the latest versions to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Apple iOS, OS X, tvOS, watchOS

CVE-2016-4702Critical
In Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, a vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Original NVD description (English source)

Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app.