Product:
watchOS, tvOS, macOS, iOS, iPadOS, visionOS
Summary
A privacy issue was addressed with improved checks. This issue allows an app to potentially identify what other apps a user has installed. The issue has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-20641 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that, when installed on a user’s device, could access information about other installed applications. This requires local access to the device and user interaction to install the malicious app, making it a low-complexity attack.
Affected Products
- watchOS 26.3 – Fixed privacy issue with improved checks.
- tvOS 26.3 – Addressed the same privacy concern.
- macOS Tahoe 26.3 – Privacy issue resolved with updates.
- macOS Sonoma 14.8.4 – Includes fixes for the identified vulnerability.
- macOS Sequoia 15.7.4 – Updated to mitigate the privacy issue.
- iOS 18.7.5 – Privacy checks improved in this version.
- iPadOS 18.7.5 – Fixed the vulnerability related to app identification.
- visionOS 26.3 – Addressed the privacy issue.
- iOS 26.3 – Includes fixes for the identified vulnerability.
- iPadOS 26.3 – Updated to mitigate the privacy issue.
Mitigation
To mitigate this vulnerability, users should ensure that their devices are updated to the latest versions of the operating systems mentioned. Regularly updating software can help protect against known vulnerabilities and improve overall security.