CVE-2021-30815

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen...

Code injection

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen...

CVE-2021-30815

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen...

CVE-2021-30815

CVE-2021-30815 affects Apple iOS/iPadOS 15 (and prior) where Siri/lock-screen interaction could allow a local attacker to view contacts from a locked device. Root cause cited as improper state management; Apple fixed the issue in iOS 15/iPadOS 15. Remediation: update to those versions. Exploitati...

CVE-2021-30815

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen...

CVE-2021-0688

In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8....

Race condition

In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8....

CVE-2021-0688

CVE-2021-0688 is a local privilege-escalation race-condition vulnerability in Android affecting PhoneWindowManager.lockNow (lock screen bypass). Exploitation could grant higher privileges without user interaction; impact is described as local escalation with user privileges needed. Affected Andro...

Apple Pay vulnerable to wireless pickpockets

Researchers have shown that it is possible for attackers to bypass an Apple iPhones lock screen to access payment services and make contactless transactions. The issue, which only applies to Apple Pay and Visa, is caused by the use of so-called magic bytes, a unique code used to unlock Apple Pay...

About the security content of iOS 15.0.1 and iPadOS 15.0.1

About the security content of iOS 15.0.1 and iPadOS 15.0.1 This document describes the security content of iOS 15.0.1 and iPadOS 15.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Apple iOS/macOS 授权问题漏洞

Apple iOS is a set of operating systems developed by Apple Inc. for mobile devices. Apple iOS/macOS suffers from an authorization issue vulnerability that stems from improper execution of the Siri lock screen. The vulnerability can be exploited by an attacker to view contacts via the lock screen...

CVE-2021-1835

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen...

CVE-2021-1835

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen...

Design/Logic Flaw

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen...

CVE-2021-1835

CVE-2021-1835 concerns Apple iOS/iPadOS where a person with physical access could access notes from the lock screen. Affected: iOS/iPadOS prior to 14.5; Impact: confidentiality of notes could be exposed locally. The issue was fixed in iOS 14.5 and iPadOS 14.5 with improved checks. Metrics (NVD): ...

CVE-2021-30756

A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions...

CVE-2021-30756

A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions...

CVE-2021-30756

A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions...

CVE-2021-30756

The CVE-2021-30756 issue concerns a privacy-related information disclosure on Apple devices where a local attacker could view Now Playing information from the lock screen. Affected components are Apple's Now Playing/MediaRemote functionality across macOS Big Sur and iOS/iPadOS. Root cause is a pe...

CVE-2021-30756

A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions...