8.8

CVE-2016-4657: Apple iOS Webkit Memory Corruption Vulnerability

CVSS: 8.8v3.1HighKEVAnalyzed
AliasesUBUNTU-CVE-2016-4657
Published 25-08-2016Last modified 21-10-2025
Open JSON

Vulnerability summary

CVE-2016-4657 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in Apple iOS. It is known to be exploited: CISA lists it, first on 24-05-2022. EPSS estimates a 66.79% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
66.79%
0%100%
Critical · 0.00 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits4reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2017-0069USN-3166-1

Timeline

  1. 25-08-2016
    PublishedVulnerability first disclosed.
  2. 24-05-2022
    Added to CISA KEVApple iOS Webkit Memory Corruption Vulnerability
  3. 14-06-2022
    CISA remediation dueApply updates per vendor instructions.
  4. 21-10-2025
    Last modifiedVulnerability information updated.

Description

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

66.79%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 66.79% on 18-09-2026

18-09-202618-10-2026
EPSS score
66.79%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
24-05-2022
Federal due date
14-06-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2016-4657

Public exploits

4 found
  • referenceUnverified

    Exploit Reference (youtube.com)

    Maturity: unknown

  • exploit-databasedoshardwareUnverified

    Nintendo Switch - WebKit Code Execution (PoC)

    Maturity: poc

  • exploit-databaseremoteiosVerified

    WebKit - not_number defineProperties UAF (Metasploit)

    Maturity: weaponized

Show all 4 exploits
  • MetasploitMetasploitremoteUnverified

    WebKit not_number defineProperties UAF

    exploit/apple_ios/browser/webkit_trident

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Ubuntu4 products
  • qtwebkit-opensource-srcAll versions (No fix recorded)
  • qtwebkit-sourceAll versions (No fix recorded)
  • webkit2gtk< 2.14.2-0ubuntu0.16.04.1
  • webkitgtkAll versions (No fix recorded)
Apple1 product

2 vendors · 5 products

References

13 links
Show all 13 references