CISA KEV · Known exploitedMedium

CVE-2016-4655

Apple iOS

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

PRIORITY ASSESSMENT

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.

Known exploitationConfirmed by CISA KEV

Exploit probability30.3%

Technical severityCVSS 5.5

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

Confirm exposure before applying a vendor-supported change.

CISA required action

Apply updates per vendor instructions.

Due date: 2022.06.14

1
Identify
Confirm that Apple iOS and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.