CVE-2016-7651

CVE-2016-7651 describes a local authorization bypass vulnerability in the "Accounts" component of Apple iOS before 10.2 and watchOS before 3.1.1. This flaw allows a local attacker to bypass intended authorization restrictions due to mishandling of app uninstallation, potentially leading to limited impact on confidentiality, integrity, and availability. The vulnerability has a CVSSv3 score of 5.3 (Medium) with a low attack complexity and no user interaction required. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV entry, though it garnered some community discussion and media coverage at the time of disclosure.