Product:
iPhone
Summary
An inconsistent user interface issue was addressed with improved state management. This issue allows an attacker with physical access to an iPhone to take and view screenshots of sensitive data during iPhone Mirroring with Mac. The issue has been fixed in iOS 26.3 and iPadOS 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.6 | CVE-2026-20640 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to the iPhone. Once access is gained, the attacker can initiate iPhone Mirroring with a Mac, allowing them to capture screenshots of sensitive data displayed on the iPhone. This could lead to unauthorized access to personal or confidential information.
Affected Products
- iOS 26.3 – Fixed an issue with inconsistent user interface and state management.
- iPadOS 26.3 – Addressed the same user interface issue affecting iPhone Mirroring.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of iOS and iPadOS. Regularly updating devices helps protect against known vulnerabilities and enhances overall security.