Product:
iOS and iPadOS
Summary
The issue was resolved by sanitizing logging. An app may be able to enumerate a user’s installed apps. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-20663 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the device. By running a malicious application, the attacker could potentially enumerate the installed apps on the device, which could lead to further attacks or information leakage.
Affected Products
- iOS 26.3 – Fixed the issue by sanitizing logging to prevent app enumeration.
- iPadOS 26.3 – Addressed the same vulnerability as in iOS 26.3.
- iOS 18.7.5 – Resolved the issue for this version as well.
- iPadOS 18.7.5 – Similar fix applied as in iOS 18.7.5.
Mitigation
Users are advised to update their devices to the latest versions of iOS and iPadOS to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and enhance device security.