CyberSec.Space Logo
Back to CVE Browser

CVE-2016-4657

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score86.8660%
EPSS Percentile97.39th
PublishedAug 25, 2016
Last ModifiedApr 21, 2026

Vulnerability Description

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Affected Platforms (CPE)

💻
Apple

Iphone Os

< 9.3.5

References & Advisories

🔗 http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.html
🔗 http://www.securityfocus.com/bid/92653
🔗 http://www.securitytracker.com/id/1036694
🔗 https://blog.lookout.com/blog/2016/08/25/trident-pegasus/
🔗 https://support.apple.com/HT207107
🔗 https://www.exploit-db.com/exploits/44836/
🔗 https://www.youtube.com/watch?v=xkdPjbaLngE
🔗 http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.html

Related Vulnerabilities

CVE-2008-421110.0

Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iP...

CVE-2009-220410.0

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitr...

CVE-2008-230310.0

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitra...

CVE-2010-111910.0

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on ...