CVE-2016-1802: CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS befo...

Security readout for executives and security teams

This Apple cryptography bug could let a malicious app obtain sensitive information on older Apple operating systems. The issue was fixed in iOS 9.3.2, OS X 10.11.5, tvOS 9.2.1, and watchOS 2.2.1. No active exploitation evidence is provided in the source bundle. Exposure is most likely on unmanaged or legacy Apple devices running iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, or watchOS before 2.2.1. Prioritize remediation for legacy Apple devices that can install untrusted apps or handle sensitive data. This is not KEV-listed in the supplied evidence, but the impact is sensitive information disclosure in core cryptographic functionality. Mitigation focus: Upgrade affected Apple systems to the fixed versions or later.; Use MDM or asset tools to identify outdated Apple OS versions.; Check Apple advisories for any platform-specific update notes..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.