Abhay_Kailasia

A privacy issue exists where a user may be able to view restricted content directly from the lock screen due to insufficient checks.

An issue allows an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device. The estimated number of potentially affected devices is not specified.

An authentication issue was addressed with improved state management. An attacker with physical access to an unlocked device may be able to access Photos while the app is locked. The issue is related to the Accessibility component and its authorization mechanism, which may allow an attacker to gain unauthorized access to protected information.

This issue was addressed through improved state management. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen.

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue allows an attacker with physical access to an iOS device to view notification content from the lock screen. This is possible due to insufficient logic in handling lock screen notifications. The estimated number of potentially affected devices worldwide is not specified. Recommendations: For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 or later. For iOS versions prior to 18.2, update to iOS 18.2 or later. For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later.

The issue is related to the Password Autofill component in the mentioned operating systems and is caused by a lack of authorization. This may allow an attacker to read and write arbitrary files. The problem may cause the password autofill function to fill in passwords even after authentication has failed.

The issue allows an attacker with physical access to potentially access contact photos from the lock screen. This is possible due to insufficient restrictions on options offered on a locked device.

The issue allows an attacker to view restricted content from the lock screen due to inadequate state management. This has been addressed through improved state management.

This issue allows an attacker to see recent photos without authentication in Assistive Access. The issue was addressed by restricting options offered on a locked device.

This issue was addressed through improved state management. An attacker with physical access may be able to use Siri to access sensitive user data.

The issue was addressed with improved checks. An attacker may be able to view restricted content from the lock screen.

A privacy issue was addressed by moving sensitive data to a more secure location. A malicious application may be able to determine a user's current location.

A logic issue was addressed with improved checks. This issue may cause a user's private browsing activity to be unexpectedly saved in the App Privacy Report.

This issue allows a person with physical access to a device to potentially access private calendar information using VoiceOver. The issue was addressed with improved redaction of sensitive information.

The issue allows an app to potentially access sensitive user data due to improper handling of caches. This has been addressed with improved cache handling.

A person with physical access to an iOS device may be able to view the last image used in Magnifier from the lock screen. This issue was addressed by restricting options offered on a locked device.

The issue was addressed with improved checks. Processing a large input may lead to a denial of service.

A lock screen issue allowed unauthorized access to contacts on a locked device. This was possible due to inadequate state management. A local attacker could potentially view contacts from the lock screen.