apple ios CVE-2016-4655 is a vulnerability in Apple iOS
Published on August 25, 2016

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Known Exploited Vulnerability

This Apple iOS Information Disclosure Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.

The following remediation steps are recommended / required by June 14, 2022: Apply updates per vendor instructions.

Vulnerability Analysis

CVE-2016-4655 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.


Products Associated with CVE-2016-4655

You can be notified by stack.watch whenever vulnerabilities like CVE-2016-4655 are published in these products:

Apple iOS
 

What versions of iOS are vulnerable to CVE-2016-4655?