CVE-2016-7621
HIGHApple Watchos < 2.2.2 - Use After Free
Title source: ruleDescription
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via unspecified vectors.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · clocalmacos
https://www.exploit-db.com/exploits/40956
References (6)
Scores
CVSS v3
7.8
EPSS
0.0016
EPSS Percentile
36.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (3)
apple/iphone_os
< 10.1.1
apple/mac_os_x
< 10.12.1
apple/watchos
< 2.2.2
Published
Feb 20, 2017
Tracked Since
Feb 18, 2026