CVE-2015-1106 — Sensitive Information Exposure in Apple Iphone OS

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 79.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple IOS
Timeline
PublishedApr 10
Latest updateMay 17

Description

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

▶Appleapple/ios8.3

🔴Vulnerability Details

1
GHSA
GHSA-xvjw-g673-q26h: The QuickType feature in the Keyboards subsystem in Apple iOS before 8↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2015-1106: iOS 8.3↗
▶
CVE-2015-1106 — Sensitive Information Exposure in Apple | cvebase