AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2016-4620

LOW · CVSS 3.3 EPSS 0.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-09-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2016-4620
Severity
LOW
CVSS
3.3
EPSS
0.83%

Original Filing — NVD Description

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app.