High severity7.5NVD Advisory· Published Mar 24, 2016· Updated May 6, 2026

CVE-2016-1766

Description

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors.

Affected products

Apple Inc./Iphone Os
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <=9.2.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlnvdVendor Advisory
support.apple.com/HT206166nvdVendor Advisory
www.securitytracker.com/id/1035353nvd
www.zerodayinitiative.com/advisories/ZDI-16-314nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000