{"id":"CVE-2016-7638","aliases":["EUVD-2016-8488","GHSA-4j8h-qwcm-2wwf"],"status":"published","title":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue...","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the \"Find My iPhone\" component, which allows physically proximate attackers to disable this component by bypassing authentication.","severity":{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00398,"percentile":0.34299,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-254"],"published":"2017-02-20T08:35:00Z","modified":"2026-06-17T00:53:23Z","products":[{"vendor":"apple","product":"iphone_os"}],"references":[{"url":"https://support.apple.com/HT207422","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1037429","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/94850","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7638"},{"url":"https://github.com/advisories/GHSA-4j8h-qwcm-2wwf"}],"sources":{"cve":[{"id":"CVE-2016-7638","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the \"Find My iPhone\" component, which allows physically proximate attackers to disable this component by bypassing authentication.","status":"published","published":"2017-02-20T08:35:00Z","modified":"2024-08-06T02:04:55.508Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-8488","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the \"Find My iPhone\" component, which allows physically proximate attackers to disable this component by bypassing authentication.","status":"published","published":"2017-02-20T08:35:00Z","modified":"2024-08-06T02:04:55Z","updated_at":"2026-11-03T02:22:31.946809Z"}],"ghsa":[{"id":"GHSA-4j8h-qwcm-2wwf","title":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue...","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the \"Find My iPhone\" component, which allows physically proximate attackers to disable this component by bypassing authentication.","status":"published","published":"2022-05-17T02:25:14Z","modified":"2023-01-27T05:04:56Z","cvss":[{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:42:35.067407Z"}],"nvd":[{"id":"CVE-2016-7638","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the \"Find My iPhone\" component, which allows physically proximate attackers to disable this component by bypassing authentication.","status":"published","published":"2017-02-20T08:59:03.353Z","modified":"2026-06-17T00:53:23.637Z","cvss":[{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-254"],"updated_at":"2026-11-02T14:03:35.822579Z"}]}}