CVE-2012-3736: The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an i...

Security readout for executives and security teams

CVE-2012-3736 is an Apple iOS passcode-lock bypass fixed in iOS 6. A person with physical access to a vulnerable device could bypass the intended passcode requirement through FaceTime call handling. Business urgency is mainly for unmanaged or legacy Apple devices still running iOS versions before 6. Exposure is limited to Apple iOS devices running versions before iOS 6. Modern managed fleets are unlikely to be affected unless very old devices remain in use, storage, labs, or specialized environments. Low to moderate for most organizations because this is an old, physical-access issue. Prioritize if legacy iOS devices protect sensitive data, remain deployed in regulated environments, or are accessible to untrusted people. Mitigation focus: Upgrade affected devices to iOS 6 or later, per Apple’s fixed-version statement.; Retire or isolate devices that cannot be upgraded from pre-iOS 6 releases.; Review mobile asset inventories for legacy iPhones, iPads, or iPod touch devices..

Prepared

Jun 27, 2026, 18:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.