CVE-2014-4450

Publication date

2014-10-22 10:00:00

Family

apple

State

PUBLISHED

Description

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it easier for attackers to discover credentials by reading credential values within unintended DOM input elements.