CVE-2016-4686

Published: Feb 20, 2017Modified: May 13, 2026

4.4

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.8 / Impact: 2.5

Source: NVD

Description

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation.

Affected (1)

Products: Apple: Iphone Os

Apple

1 product

Iphone Os

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 10.0.3

Related CWEs

CWE-264

References (6)

http://www.securityfocus.com/bid/93848

Source: product-security@apple.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037088

Source: product-security@apple.com

https://support.apple.com/HT207271

Source: product-security@apple.com

Vendor Advisory

http://www.securityfocus.com/bid/93848

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037088

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT207271

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.