An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
5.5Orta
KEV
CVE-2016-4655Apple iOS Information Disclosure Vulnerability
Aktif olarak istismar ediliyor — Apple iOS Information Disclosure Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 24.05.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 14.06.2022.
Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2016-4655
Açıklama
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- APPLE-SA-2016-09-14-1 vendor-advisoryBroken LinkMailing ListVendor Advisory
- https://blog.lookout.com/blog/2016/08/25/trident-pegasus/ Broken Link
- 44836 exploitExploitThird Party AdvisoryVDB Entry
- 92651 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- https://support.apple.com/HT207107 Vendor Advisory
- APPLE-SA-2016-08-25-1 vendor-advisoryBroken LinkMailing ListVendor Advisory
- 1036694 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 92965 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- https://support.apple.com/HT207145 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4655 US Government Resource
CPE eşleşmeleri (NVD) (2)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 9.3.5cpe:2.3:o:apple:iphone_os:10.0:*:*:*:*:*:*:*