Product:
iOS and iPadOS
Summary
An inconsistent user interface issue was addressed with improved state management. This issue may allow an app to access sensitive user data. The problem has been fixed in the latest versions of iOS and iPadOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-46311 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious app that takes advantage of the inconsistent user interface. By manipulating the app’s state management, the attacker may gain unauthorized access to sensitive user data without requiring user interaction.
Affected Products
- iOS 18.7.3 – Fixed an issue that allowed apps to access sensitive user data.
- iPadOS 18.7.3 – Addressed the same user interface inconsistency as in iOS.
- iOS 26.2 – Updated to improve state management and security.
- iPadOS 26.2 – Similar improvements made to enhance user data protection.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS and iPadOS. Regularly updating software helps protect against known vulnerabilities and enhances overall security.