CVE-2009-2207: Apple iPhone OS

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages.

Affected products

• Apple iPhone OS: version 3.0 only; version 3.0.1 only

Published 2009-09-10. Last modified 2026-06-16.