CVE-2016-7765

Vulnerability

The issue resides in the Clipboard component of iOS versions prior to 10.2. A physically proximate attacker can access the device's clipboard contents while the device is in the lockscreen state. This affects iPhone 5 and later, iPod touch 6th generation and later, and iPad 4th generation and later.

Exploitation

An attacker with physical proximity to the locked device can view the clipboard contents without authentication. No special tools or credentials are required; the attacker only needs to interact with the device's lock screen interface to access the clipboard data.

Impact

By viewing clipboard contents, an attacker can obtain sensitive information that the user may have copied, such as passwords, private messages, or personal data. This is a confidentiality breach that occurs while the device is locked.

Mitigation

Apple addressed this issue in iOS 10.2, released on December 12, 2016 [1]. Users should update to iOS 10.2 or later to remediate the vulnerability. No workaround is available for affected versions.