VULNERABILITY INTELLIGENCE

CVE-2016-4734

CVSS score9.6 CRITICAL

EPSS probability3.27%

CISA KEVNot currently listed

Published2016-09-25

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4735.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

product-security@apple.com — Mailing List
product-security@apple.com — Mailing List
product-security@apple.com — Mailing List
product-security@apple.com — Third Party Advisory, VDB Entry
product-security@apple.com — Third Party Advisory, VDB Entry
product-security@apple.com — Vendor Advisory
product-security@apple.com — Vendor Advisory
product-security@apple.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List
af854a3a-2127-422b-91ae-364da2661108 — Mailing List
af854a3a-2127-422b-91ae-364da2661108 — Mailing List
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry