VulnerabilityModified
CVE-2016-4762
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
HIGH 8.8EPSS 2.19%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.19% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/safari · apple/iphone os · apple/icloud · apple/itunes
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00013.htmlMailing List, Vendor Advisory
- http://www.securityfocus.com/bid/93066
- http://www.securitytracker.com/id/1036854
- https://support.apple.com/HT207143Vendor Advisory
- https://support.apple.com/HT207147Vendor Advisory
- https://support.apple.com/HT207157Vendor Advisory
- https://support.apple.com/HT207158Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00013.htmlMailing List, Vendor Advisory
- http://www.securityfocus.com/bid/93066
- http://www.securitytracker.com/id/1036854
- https://support.apple.com/HT207143Vendor Advisory
- https://support.apple.com/HT207147Vendor Advisory
- https://support.apple.com/HT207157Vendor Advisory
- https://support.apple.com/HT207158Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.