First published: Fri Apr 10 2015(Updated: )
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | <=8.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-1116 is classified as a medium severity vulnerability.
To mitigate CVE-2015-1116, upgrade your device to iOS 8.3 or later.
CVE-2015-1116 affects Apple devices running iOS versions before 8.3.
CVE-2015-1116 exposes unblurred application snapshots that can reveal sensitive information to nearby observers.
No, CVE-2015-1116 requires physical proximity to exploit the vulnerability.