CVE-2016-4728

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site.

• CWE-20

• http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing List, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing List, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlMailing List, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing List, Vendor Advisory
• http://www.securityfocus.com/bid/93064Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036854Third Party Advisory, VDB Entry
• https://support.apple.com/HT207142Vendor Advisory
• https://support.apple.com/HT207143Vendor Advisory
• https://support.apple.com/HT207157Vendor Advisory
• https://support.apple.com/HT207158Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing List, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing List, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlMailing List, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing List, Vendor Advisory
• http://www.securityfocus.com/bid/93064Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036854Third Party Advisory, VDB Entry
• https://support.apple.com/HT207142Vendor Advisory
• https://support.apple.com/HT207143Vendor Advisory
• https://support.apple.com/HT207157Vendor Advisory
• https://support.apple.com/HT207158Vendor Advisory

Published

Sep 25, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4722The IDS - Connectivity component in Apple iOS before 10 and …
• CVE-2016-4723Intel Graphics Driver in Apple OS X before 10.12 allows atta…
• CVE-2016-4724IOAcceleratorFamily in Apple iOS before 10 and OS X before 1…
• CVE-2016-4725IOAcceleratorFamily in Apple iOS before 10, OS X before 10.1…
• CVE-2016-4726IOAcceleratorFamily in Apple iOS before 10, OS X before 10.1…
• CVE-2016-4727IOThunderboltFamily in Apple OS X before 10.12 allows attack…
• CVE-2016-4729WebKit in Apple iOS before 10 and Safari before 10 allows re…
• CVE-2016-4730WebKit in Apple iOS before 10, Safari before 10, and tvOS be…
• CVE-2016-4731WebKit in Apple iOS before 10 and Safari before 10 allows re…
• CVE-2016-4732Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-4733WebKit in Apple iOS before 10, Safari before 10, and tvOS be…
• CVE-2016-4734WebKit in Apple iOS before 10, Safari before 10, and tvOS be…