VulnerabilityModified
CVE-2016-4593
The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via unspecified vectors.
LOW 2.4EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via unspecified vectors.
- CVSS 3.0
- 2.4 LOWCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.htmlMailing List
- http://www.securityfocus.com/bid/91825
- http://www.securitytracker.com/id/1036344
- https://support.apple.com/HT206902Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.htmlMailing List
- http://www.securityfocus.com/bid/91825
- http://www.securitytracker.com/id/1036344
- https://support.apple.com/HT206902Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.