Product:
iOS
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user’s installed apps.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-24089 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious app that takes advantage of the permissions issue to enumerate the installed applications on a user’s device. By leveraging the low attack complexity and network attack vector, the attacker could potentially gather sensitive information about the user’s app usage without requiring any user interaction.
Affected Products
- iOS 18.3: Fixed permissions issue with additional restrictions.
- iPadOS 18.3: Addressed the same permissions issue as in iOS.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest version of iOS or iPadOS, specifically version 18.3 or later. Regularly updating devices ensures that known vulnerabilities are patched and reduces the risk of exploitation.