Description
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1041031
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT208848
Scores
CVSS v3
4.6
EPSS
0.0034
EPSS Percentile
26.5%
Attack Vector
PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (1)
apple/iphone_os
< 11.4
Published
Jun 08, 2018
Tracked Since
Feb 18, 2026