CVE-2016-4656

A memory corruption vulnerability in the iOS kernel allowed attackers to execute privileged code or cause DoS via a crafted app.

This kernel-level memory corruption flaw in Apple iOS enabled remote code execution in a privileged context, directly impacting DIB organizations relying on Apple devices for secure operations. The vulnerability was actively exploited in the wild (KEV), demonstrating that even major vendors can ship unpatched, high-severity flaws that compromise device integrity and violate compliance requirements like CMMC/NIST 800-171. DIBs must enforce strict mobile device management (MDM) policies, verify patch levels, and consider hardware replacement for affected devices to mitigate ongoing exploitation risks.

Shame score — A kernel-level memory corruption flaw shipped in a widely deployed OS was actively exploited in the wild, showing a failure to patch or mitigate a high-severity vulnerability before it became a public threat.