CVE-2015-1116: Infoleak
Published Apr 10, 2015
·Updated
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen.
Affected Software
1 affected component
apple iPhone OS<=8.2
Event History
Apr 10, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1116?
CVE-2015-1116 is classified as a medium severity vulnerability.
2
How do I fix CVE-2015-1116?
To mitigate CVE-2015-1116, upgrade your device to iOS 8.3 or later.
3
What devices are affected by CVE-2015-1116?
CVE-2015-1116 affects Apple devices running iOS versions before 8.3.
4
What does CVE-2015-1116 expose?
CVE-2015-1116 exposes unblurred application snapshots that can reveal sensitive information to nearby observers.
5
Can remote attackers exploit CVE-2015-1116?
No, CVE-2015-1116 requires physical proximity to exploit the vulnerability.