Private calendar disclosure via lock-screen Siri

Information disclosure in Siri on affected Apple operating systems allows physically proximate attackers to read private calendar data. The lock-screen state logic permits Siri to return calendar information while the device remains locked; Apple has not disclosed the specific state transition or check that fails. Physical access to a locked device with Siri available is required, and the demonstrated consequence is limited to disclosure of private calendar information.