PT-2016-3354 · Apple · Ios

Qwertyoruiop + 2 · Publicado 2016-08-25 · Atualizado 2026-02-28 · CVE-2016-4655

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5

Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app.

Recommendations For versions prior to 9.3.5, update to version 9.3.5 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2021-04940

CVE-2016-4655

Produtos afetados

Ios

Referências · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb · Exploit
• 🔥 https://github.com/jndok/PegasusX · Exploit
• 🔥 https://github.com/Cryptiiiic/skybreak · Exploit
• 🔥 https://exploit-db.com/exploits/44836 · Exploit
• https://t.me/cvenotify/109039 · Publicação no Telegram
• https://t.me/cvenotify/84992 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2021-04940 · Nota de Segurança
• https://support.apple.com/HT207145 · Aviso do Fabricante
• https://t.me/cvenotify/109990 · Publicação no Telegram
• http://securitytracker.com/id/1036694 · Nota
• https://twitter.com/grok/status/2027884114435543072 · Publicação no Twitter
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00005.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4655 · Aviso do Fabricante
• https://t.me/cvenotify/108371 · Publicação no Telegram
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota