Description
The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it easier for attackers to discover credentials by reading credential values within unintended DOM input elements.
References
- https://support.apple.com/kb/HT6541
- 1031077 vdb-entry
- appleios-cve20144450-info-disc(97666) vdb-entry
- APPLE-SA-2014-10-20-1 vendor-advisory
- 70660 vdb-entry