CVE-2016-4690

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Image Capture" component, which allows attackers to execute arbitrary code via a crafted USB HID device.

• CWE-20

• http://www.securityfocus.com/bid/94850Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037429
• https://support.apple.com/HT207422Vendor Advisory
• http://www.securityfocus.com/bid/94850Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037429
• https://support.apple.com/HT207422Vendor Advisory

Published

Feb 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4684Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-4685An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4686An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4687Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-4688An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4689An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4691An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4692An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4693An issue was discovered in certain Apple products. iOS befor…
• CVE-2016-4694The Apache HTTP Server in Apple OS X before 10.12 and OS X S…
• CVE-2016-4695Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-4696AppleEFIRuntime in Apple OS X before 10.12 allows attackers …