Description
LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen.
References
- 1031650 vdb-entry
- macosx-cve20148827-sec-bypass(100521) vdb-entry
- http://support.apple.com/HT204244
- APPLE-SA-2015-01-27-4 vendor-advisory