GCVE - cpe:2.3:o:apple:iphone_os:16.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:apple:iphone_os:16.7:*:*:*:*:*:*:*

part: o version: 16.7 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Iphone Os (`a8f177aa-2ee7-5c0b-9356-ee8bf462ff28`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-23263`	vulnerable	2026-06-08 06:29:37.153129	Details available A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced. Published: 2024-03-08T01:36:19.295Z Updated: 2026-04-02T18:26:35.629Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/120880 https://support.apple.com/en-us/120881 https://support.apple.com/en-us/120882 https://support.apple.com/en-us/120883 https://support.apple.com/en-us/120893	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23246`	vulnerable	2026-06-08 06:29:37.124999	Details available This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to break out of its sandbox. Published: 2024-03-08T01:35:32.589Z Updated: 2026-04-02T18:13:13.106Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/120880 https://support.apple.com/en-us/120881 https://support.apple.com/en-us/120882 https://support.apple.com/en-us/120883 https://support.apple.com/en-us/120893	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5217`	vulnerable	2026-06-08 06:19:42.907639	Details available Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Published: 2023-09-28T15:23:18.340Z Updated: 2025-10-21T23:05:36.191Z Open on db.gcve.eu Reference links https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html https://crbug.com/1486441 http://www.openwall.com/lists/oss-security/2023/09/28/5 http://www.openwall.com/lists/oss-security/2023/09/28/6 http://www.openwall.com/lists/oss-security/2023/09/29/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.