CVE-2016-4655
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- May 11, 2016
- Published Date
- August 25, 2016
- Last Updated
- January 29, 2025
- Vendor
- n/a
- Product
- n/a
- Description
- The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
CVSS Scores
CVSS v3.1
5.5 - MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
SSVC Information
- Exploitation
- active
- Technical Impact
- partial
Exploit Status
- Exploited in the Wild
- Yes (added 2022-05-24 00:00:00 UTC) Source
References
http://lists.apple.com/archives/security-announce/2016/Sep/msg00005.html
https://blog.lookout.com/blog/2016/08/25/trident-pegasus/
https://www.exploit-db.com/exploits/44836/
http://www.securityfocus.com/bid/92651
https://support.apple.com/HT207107
http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.html
http://www.securitytracker.com/id/1036694
http://www.securityfocus.com/bid/92965
https://support.apple.com/HT207145
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2022-05-24 00:00:00 UTC |
Scanner Integrations
| Scanner | URL | Date Detected |
|---|---|---|
| Metasploit | https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb | 2025-04-29 11:01:10 UTC |