CVE-2016-4655

An iOS kernel vulnerability allowed attackers to read sensitive memory data via a crafted app, and it was actively exploited in the wild.

The Apple iOS kernel flaw (CVE-2016-4655) let attackers extract sensitive information from memory using a malicious application. DIBs must care because unpatched iOS devices in the supply chain or on contractor hardware could leak credentials, keys, or classified data. Organizations should enforce strict mobile device management, patch iOS promptly, and avoid using unpatched Apple devices for classified work.

Shame score — A known kernel vulnerability was actively exploited in the wild, indicating a failure to patch a critical flaw that could leak sensitive data.