CVE-2016-4734
9.6
CRITICAL · CVSS 3.0 · EPSS 3.3% (pctl 88)
In your normal cycle
Critical by CVSS (9.6), but no sign of active exploitation.
Description
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4735.
Scoring
| CVSS | 9.6 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
| EPSS | 3.27% — more likely to be exploited than 88% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2016-09-25 |
| Last modified | 2026-06-17 |
Affected (3)
| Vendor | Product |
|---|---|
| apple | iphone os |
| apple | safari |
| apple | tvos |
References
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- http://www.securityfocus.com/bid/93057
- http://www.securitytracker.com/id/1036854
- https://support.apple.com/HT207142
- https://support.apple.com/HT207143
- https://support.apple.com/HT207157
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- http://www.securityfocus.com/bid/93057
- http://www.securitytracker.com/id/1036854
- https://support.apple.com/HT207142
- https://support.apple.com/HT207143
- https://support.apple.com/HT207157
→ the Explorer · watch your stack · NVD