CVE-2016-4635: Apple iPhone OS

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vectors.

Affected products

• Apple iPhone OS: up to and including 9.3.2
• Apple Mac OS X: up to and including 10.11.5

Published 2016-07-22. Last modified 2026-06-17.