Apple iOS Memory Corruption Vulnerability

ÉLEVÉE 7.8EXPLOITED (CISA KEV)CVE-2016-4656 · Published 25/08/2016 · updated 17/06/2026

Apple iOS Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/05/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
iOS Apple	Versions not published yet (product named by CISA KEV)

Description

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

References

lists.apple.com/archives/security-announce/2016/Aug/msg00000.html · Broken Link
securityfocus.com/bid/92652 · Broken Link
securitytracker.com/id/1036694 · Broken Link
blog.lookout.com/blog/2016/08/25/trident-pegasus · Broken Link
support.apple.com/HT207107 · Release Notes
exploit-db.com/exploits/44836 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2016-4656

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free