CVE-2015-5906

The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier…

published September 18, 2015

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier for remote attackers to discover a password by leveraging a later prediction containing that character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01962 · 80.1th percentile
Published
2015-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier…
    cvelistv5