Exploited vulnerability

CVE-2016-4657

TLP:CLEAR

Apple iOS Webkit Memory Corruption Vulnerability

Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Facts

Vendor: Apple
Product: iOS
CVSS: 8.8
EPSS (probability of exploitation within 30 days): 66.8 %
On CISA's Known Exploited Vulnerabilities list since: 24 May 2022
First known exploitation: 24 May 2022
CISA's deadline for US federal agencies: 14 June 2022
Weakness: CWE-119
First seen by Risk Letters: 24 May 2022

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD