CVE-2016-4655: Apple iOS Information Disclosure Vulnerability

Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2022-05-24. EPSS: 33.4% chance of exploitation in the next 30 days.

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

Affected products

• Apple iPhone OS: before 9.3.5 (fixed in 9.3.5); version 10.0 only

Published 2016-08-25. Last modified 2026-06-17.