CVE-2016-4655
Apple iOS Information Disclosure Vulnerability
Published Aug 25, 2016 · updated Jun 16, 2026 · apple iphone os
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
Timeline
Detection, updates, and resolution for this record.
Aug 25, 2016 · Catalog
Detected
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
May 24, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 14, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
Required action
Apply updates per vendor instructions.
CISA due date Jun 14, 2022
Affected
- cpe apple/iphone osversion unspecified
- cpe apple/iphone os10.0
- vendor Apple iOSversion unspecified
Sources
- CISA KEVCVE-2016-4655
The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.
cisa.gov - CVE.orgCVE-2016-4655
Official CVE identifier
cve.org - FIRST EPSSCVE-2016-4655
30-day exploitation probability 33.4%
first.org - Exploit Database44836
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_apple_ios/browser/webkit_trident
Public module reference (manual). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2016-4655
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
nvd.nist.gov