Apple iOS Webkit Memory Corruption Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2016-4657 · Published 25/08/2016 · updated 17/06/2026

Apple iOS Webkit Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/05/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
iOS Apple	Versions not published yet (product named by CISA KEV)

Description

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

References

lists.apple.com/archives/security-announce/2016/Aug/msg00000.html · Broken Link
securityfocus.com/bid/92653 · Broken Link
securitytracker.com/id/1036694 · Broken Link
blog.lookout.com/blog/2016/08/25/trident-pegasus · Broken Link
support.apple.com/HT207107 · Release Notes
exploit-db.com/exploits/44836 · Exploit
youtube.com/watch · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2016-4657

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free