CVE-2016-4656

HIGH KEV RANSOMWARE

Apple Iphone OS < 9.3.5 - Out-of-Bounds Write

Title source: rule

Description

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremoteios

https://www.exploit-db.com/exploits/44836

View Code ZIP pw:eip

metasploit WORKING POC MANUAL

by qwertyoruiop, siguza, tihmstar, benjamin-42, timwr · rubypocapple_ios

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb

View Code ZIP pw:eip

References (7)

[Mailing List, Vendor Advisory] http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.html

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/92652

[Broken Link, Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036694

[Broken Link] https://blog.lookout.com/blog/2016/08/25/trident-pegasus/

[Release Notes, Vendor Advisory] https://support.apple.com/HT207107

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/44836/

[Third Party Advisory, US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4656

Scores

CVSS v3 7.8

EPSS 0.6674

EPSS Percentile 98.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitation Intel

CISA KEV 2022-05-24

VulnCheck KEV 2016-08-15

InTheWild.io 2016-08-15

ENISA EUVD EUVD-2016-5642

Ransomware Use Confirmed

Classification

CWE

CWE-787

Status draft

Affected Products (1)

apple/iphone_os < 9.3.5

Timeline

Published Aug 25, 2016

KEV Added May 24, 2022

Tracked Since Feb 18, 2026