CVE-2016-1731: Apple Software Update

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream.

Affected products

• Apple Software Update: up to and including 2.1.3.127

Published 2016-03-14. Last modified 2026-06-17.