CVE-2015-7000

iPhone OS < 9.0.2 - Sensitive Information Exposure via Lock Screen Notification

Title source: llm
STIX 2.1

Description

Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a (1) Phone or (2) Messages notification on the lock screen soon after a setting was disabled.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT205370
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033929
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/77268

Scores

EPSS 0.0037
EPSS Percentile 29.2%

Details

CWE
CWE-200
Status published
Products (1)
apple/iphone_os < 9.0.2
Published Oct 23, 2015
Tracked Since Feb 18, 2026