CVE-2016-4655 — VulnIntel

CVE-2016-4655

MEDIUM

KEV

Exploit

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

설명

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

Score Summary

CVSS Score: 5.5
Version: 3.1
VPI: 82.50
Why this VPI (explainable, experimental)
VPI breakdown
Impact 55.00
Exploitation signal(KEV listed) ×1.50
VPI 82.50
VPI formula vpi-v1
EPSS: 33.4%
(상위 98.2%)
Attack Vector: Local Access
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
No Integrity Impact
No Availability Impact

Details

CISA KEV Listing

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	04/20/2026
NVDNIST	2.0	7.1

References (11)

Affected Products (1)

Impact	55.00
Exploitation signal(KEV listed)	×1.50
VPI	82.50