Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.4

iPhone, iPad, or Watch could reveal contacts from lock screen

CVE-2019-8775 · published 6 years ago
Summary

If someone can physically handle an iPhone, iPad, or Apple Watch, they might view the device’s contacts right from the lock screen. The problem was corrected in the iOS 13.1 and iPadOS 13.1 updates (and the corresponding watchOS release). Install the latest software updates on all Apple devices to close this gap.

What to do
  • Update apple ipados to version 13.1 or later.
  • Update apple iphone_os to version 13.1 or later.
  • Update apple watchos to version 6.1 or later.
Affected software
VendorProductAffected versions
apple ipados < 13.1
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple iphone_os < 13.1
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple watchos < 6.1
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Original advisory text
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access cont...
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.4 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published18 Dec 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-8775 · NVD
Track software like this
Free during beta