CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apple iOS WebKit Memory Corruption Remote Code Execution Vulnerability (CVE-2016-4657, Pegasus/Trident)
[Affected Scope] Apple iPhone, iPad, and iPod touch devices running iOS versions prior to 9.3.5, and applications utilizing the WebKit rendering engine
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) by enticing a user to visit a specially crafted website
[Mitigation] Immediately update the operating system of affected devices to iOS 9.3.5 or later
Apple iOS Kernel Memory Corruption Vulnerability (CVE-2016-4656) Technical Advisory
[Affected Scope] All Apple iOS devices running versions prior to iOS 9.3.5
[Impact] Attackers can execute arbitrary code with kernel privileges or cause a denial of service (memory corruption) via a crafted application
[Mitigation] Immediately update affected devices to iOS 9.3.5 or the latest available OS version
Apple iOS Kernel Memory Information Disclosure & KASLR Bypass (CVE-2016-4655, Pegasus/Trident)
[Affected Scope] All Apple iOS devices running versions prior to iOS 9.3.5
[Impact] Local attackers or malicious apps can read sensitive kernel memory, allowing them to bypass Kernel Address Space Layout Randomization (KASLR) and facilitate full system compromise
[Mitigation] Immediately update all affected iOS devices to iOS 9.3.5 or later