CVE Watch—

CVE-2016-4657

Apple iOS Webkit Memory Corruption Vulnerability

CVSS

—

No CVSS

EPSS

66.8%

p99

KEV

YES

May 24, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

66.8%EPSS · 30 days66.8%

2026-09-162026-10-14

KEV catalog record

Product

Apple / iOS

Vulnerability

Apple iOS Webkit Memory Corruption Vulnerability

Added to KEV

May 24, 2022

Remediate by

Jun 14, 2022

Known ransomware use

Summary description

Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-4657

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-4655—

98.4%

KEV—80Apple iOS Information Disclosure Vulnerability—CVE-2016-4656—

97.8%

KEV—79Apple iOS Memory Corruption Vulnerability—CVE-2021-30762—

95.8%

KEV—79Apple iOS WebKit Use-After-Free Vulnerability—CVE-2021-30761—

95.7%

KEV—79Apple iOS WebKit Memory Corruption Vulnerability—CVE-2022-42856—

95.0%

KEV—78Apple iOS Type Confusion Vulnerability—CVE-2019-7287—

91.5%

KEV—77Apple iOS Memory Corruption Vulnerability—