CVE-2015-1106

iPhone OS < 8.3 - Passcode Exposure via QuickType Bluetooth Keyboard Lock Screen

Title source: llm
STIX 2.1

Description

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032050
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/73978
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT204661

Scores

EPSS 0.0037
EPSS Percentile 29.5%

Details

CWE
CWE-200
Status published
Products (1)
apple/iphone_os < 8.2
Published Apr 10, 2015
Tracked Since Feb 18, 2026