CVE-2016-4753

No fix known EPSS 2%

Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Published 2016-09-25 · CVE record · OSV

Products: apple iphone_os, apple mac_os_x, apple tvos, apple watchos