Product:
iOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to enumerate a user’s installed apps. The vulnerability has been fixed in iOS 18.3 and iPadOS 18.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2025-24090 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that can run on the affected device. Once installed, the app could potentially access and enumerate the list of installed applications without the user’s consent, leading to privacy concerns.
Affected Products
- iOS 18.3 – Fixed permissions issue that allowed app enumeration.
- iPadOS 18.3 – Addressed the same vulnerability as in iOS.
Mitigation
Users are advised to update their devices to iOS 18.3 or iPadOS 18.3 to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and enhance overall security.