Live › vulnerability › CVE-2016-4657
Go to dashboardApple iOS WebKit has a memory corruption bug that lets a crafted web page run code or crash the browser. Attackers have used it in the wild, per CISA's known-exploited list.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple iOS | vendor | – | – |
Check the iOS version on each device under Settings > General > About; compare it to the fixed release listed by Apple's security notes.
Update iOS to a release that includes Apple's WebKit fix for CVE-2016-4657 (the fixed version is not named in the sources); apply vendor updates per CISA's instruction.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2016-4657")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.