{"id":"CVE-2016-7661","aliases":["EUVD-2016-8511","GHSA-qj3w-wq49-6v5w"],"status":"published","title":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10...","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the \"Power Management\" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01108,"percentile":0.66106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-264"],"published":"2017-02-20T08:35:00Z","modified":"2026-06-17T00:53:26Z","exploits":[{"source":"exploitdb","id":"EDB-40931","title":"Apple macOS 10.12 16A323 XNU Kernel / iOS 10.1.1 - 'set_dp_control_port' Lack of Locking Use-After-Free","type":"local","platform":"multiple","date":"2016-12-16","verified":true,"url":"https://www.exploit-db.com/exploits/40931"},{"source":"exploitdb","id":"EDB-40958","title":"Apple macOS 10.12.1 / iOS \u003c 10.2 - powerd Arbitrary Port Replacement","type":"dos","platform":"multiple","date":"2016-12-22","verified":true,"url":"https://www.exploit-db.com/exploits/40958"}],"products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"http://www.securityfocus.com/bid/94906","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40931/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://support.apple.com/HT207422","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1037469","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/40958/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://support.apple.com/HT207423","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7661"},{"url":"https://www.exploit-db.com/exploits/40931"},{"url":"https://www.exploit-db.com/exploits/40958"},{"url":"https://github.com/advisories/GHSA-qj3w-wq49-6v5w"}],"sources":{"cve":[{"id":"CVE-2016-7661","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the \"Power Management\" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.","status":"published","published":"2017-02-20T08:35:00Z","modified":"2024-08-06T02:04:56.029Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8511","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the \"Power Management\" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.","status":"published","published":"2017-02-20T08:35:00Z","modified":"2024-08-06T02:04:56Z","updated_at":"2026-11-03T02:22:31.946809Z"}],"ghsa":[{"id":"GHSA-qj3w-wq49-6v5w","title":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10...","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the \"Power Management\" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.","status":"published","published":"2022-05-17T01:17:43Z","modified":"2025-04-20T03:33:13Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:01:40.757238Z"}],"nvd":[{"id":"CVE-2016-7661","description":"An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the \"Power Management\" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.","status":"published","published":"2017-02-20T08:59:04.23Z","modified":"2026-06-17T00:53:26.057Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:35.822579Z"}]}}