CVE-2016-1852: Apple iPhone OS

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via unspecified vectors.

Affected products

• Apple iPhone OS: up to and including 9.3.1

Published 2016-05-20. Last modified 2026-06-17.