CVE-2016-4624

High

Published: 22/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the device or disrupt its operation, potentially leading to data loss or service interruption.

Recommendation

It is recommended to update systems to the latest versions to mitigate the risks associated with this vulnerability.

Other vulnerabilities in WebKit, Apple iOS, Safari, tvOS

CVE-2016-4591High
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, allowing remote attackers to access the local filesystem via unspecified vectors.

Original NVD description (English source)

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623.