CVE-2015-1106 in iOS

Summary

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/16/2015
• Disclosure: 04/10/2015
• Moderation: VulDB entry created
• Entries: 1: VDB-74766
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 4.0
• EPSS: 0.00069
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-1106
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-1106
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-1106/