CVE-2016-4762: Apple iCloud

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Affected products

• Apple iCloud: version 5.2.1 only
• Apple iPhone OS: up to and including 9.3.5
• Apple iTunes: version 12.4.3 only
• Apple Safari: up to and including 9.1.3

Published 2016-09-25. Last modified 2026-06-17.