CVE-2015-1106: Apple iPhone OS

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard.

Affected products

• Apple iPhone OS: up to and including 8.2

Published 2015-04-10. Last modified 2026-06-17.