CVE-2016-1757 Race condition in n/a

High 7.0 Published 24 Mar 2016 Updated 5 Aug 2024

Attackers can execute arbitrary code with elevated privileges via a crafted app due to a kernel race condition in Apple operating systems.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2016-1757?

CVE-2016-1757 is a high-severity vulnerability in Apple Iphone Os, published on 24 Mar 2016. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.

Weakness: CWE-362

Which versions are affected by CVE-2016-1757?

It affects 2 products.

Products include Apple Iphone Os, Apple Mac Os X.

How do I fix CVE-2016-1757?

No fix has been published for CVE-2016-1757 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-1757 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-1757 exists.

Public exploit code: 2 Exploit-DB entries and 1 proofs of concept on GitHub.

All Apple Iphone Os vulnerabilities

Sources

Also known as GHSA-vq32-944c-qm85.