CVE-2016-4655

MediumCVSS 5.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.htmlBroken Link, Mailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Sep/msg00005.htmlBroken Link, Mailing List, Vendor Advisory
http://www.securityfocus.com/bid/92651Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/92965Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036694Broken Link, Third Party Advisory, VDB Entry
https://blog.lookout.com/blog/2016/08/25/trident-pegasus/Broken Link
https://support.apple.com/HT207107Vendor Advisory
https://support.apple.com/HT207145Vendor Advisory
https://www.exploit-db.com/exploits/44836/Exploit, Third Party Advisory, VDB Entry
http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.htmlBroken Link, Mailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/Sep/msg00005.htmlBroken Link, Mailing List, Vendor Advisory
http://www.securityfocus.com/bid/92651Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/92965Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036694Broken Link, Third Party Advisory, VDB Entry
https://blog.lookout.com/blog/2016/08/25/trident-pegasus/Broken Link
https://support.apple.com/HT207107Vendor Advisory
https://support.apple.com/HT207145Vendor Advisory
https://www.exploit-db.com/exploits/44836/Exploit, Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4655US Government Resource

Timeline

Published: Aug 25, 2016
Last modified: Jun 17, 2026
Added to CISA KEV: May 24, 2022
NVD status: Analyzed

Related CVEs from 2016

CVE-2016-46567.8The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory CVE-2016-46578.8WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr CVE-2016-46589.8xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other produ CVE-2016-46607.1An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affe CVE-2016-46615.5An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ntfs" component, which misparse CVE-2016-46627.8An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleGraphicsControl" component CVE-2016-46635.5An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "NVIDIA Graphics Drivers" compon CVE-2016-46643.3An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affect CVE-2016-46653.3An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affect CVE-2016-46668.8An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affe CVE-2016-46678.8An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remot CVE-2016-46697.8An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affe