CVE-2016-3664

—

CVSS 3.0

7.4 high

EPSS

<1%p59

Published

May 23, 2016 (May 23, 2016)

Modified

Jun 17, 2026

Description

Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in-the-middle attackers to spoof this server and obtain sensitive information via a crafted certificate.

Vendors: trend micro
Products: mobile security
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.