Description
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | webkit2gtk | 2.14.2-0ubuntu0.16.04.1 | USN-3166-1 |
| Ubuntu 16.04 LTS | webkitgtk +2 | No fix yet | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
WebKit not_number defineProperties UAF
exploit/apple_ios/browser/webkit_trident
Exploit-DB 2
- WebKit - not_number defineProperties UAF (Metasploit) EDB-44836 · remote · Jun 5, 2018 · verified
- Nintendo Switch - WebKit Code Execution (PoC) EDB-44213 · dos · Mar 12, 2017
GitHub 3 repositories
-
iDaN5x/Switcheroo ★ 56 · Jun 2, 2017
Exploiting CVE-2016-4657 to JailBreak the Nintendo Switch
-
viai957/webkit-vulnerability ★ 9 · Nov 11, 2018
CVE-2016-4657 web-kit vulnerability for ios 9.3, nintendo switch browser vulnerability
-
Mimoja/CVE-2016-4657-NintendoSwitch ★ 3 · Mar 13, 2017
CVE-2016-4657 for NintendoSwitch rwx
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- USN-3166-1 webkit2gtk vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
References
- https://blog.lookout.com/blog/2016/08/25/trident-pegasus/
- https://www.youtube.com/watch?v=xkdPjbaLngE
- 44836 exploit
- 92653 vdb-entry
- https://support.apple.com/HT207107
- APPLE-SA-2016-08-25-1 vendor-advisory
- 1036694 vdb-entry