A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15…
8.8Hoch
KEV
CVE-2016-4657Apple iOS Webkit Memory Corruption Vulnerability
Bekannt ausgenutzt — Apple iOS Webkit Memory Corruption Vulnerability
CISA hat am 24.05.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 14.06.2022.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2016-4657
Beschreibung
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Schwachstellentyp (CWE):
CWE-787
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://blog.lookout.com/blog/2016/08/25/trident-pegasus/ Broken Link
- https://www.youtube.com/watch?v=xkdPjbaLngE Exploit
- 44836 exploitExploitThird Party AdvisoryVDB Entry
- 92653 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- https://support.apple.com/HT207107 Release NotesVendor Advisory
- APPLE-SA-2016-08-25-1 vendor-advisoryBroken LinkMailing ListVendor Advisory
- 1036694 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4657 US Government Resource
CPE-Treffer (NVD) (1)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 9.3.5