Apple iOS Information Disclosure Vulnerability

MEDIUM 5.5EXPLOITED (CISA KEV)CVE-2016-4655 · Published 25/08/2016 · updated 17/06/2026

Apple iOS Information Disclosure Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/05/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
iOS Apple	Versions not published yet (product named by CISA KEV)

Description

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

References

lists.apple.com/archives/security-announce/2016/Aug/msg00000.html · Broken Link
lists.apple.com/archives/security-announce/2016/Sep/msg00005.html · Broken Link
securityfocus.com/bid/92651 · Broken Link
securityfocus.com/bid/92965 · Broken Link
securitytracker.com/id/1036694 · Broken Link
blog.lookout.com/blog/2016/08/25/trident-pegasus · Broken Link
support.apple.com/HT207107 · Vendor Advisory
support.apple.com/HT207145 · Vendor Advisory
exploit-db.com/exploits/44836 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2016-4655

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free