All these actions can be carried out without the need to unlock the phone.
I think to put it all together, humans make mistakes.
Kunushevci reported the security flaw to Microsoft in October before disclosing it to the public.
Microsoft has yet to issue an official statement on the matter.
source: www.techworm.net
