Product:
iOS and iPadOS
Summary
A privacy issue was addressed by removing sensitive data. An attacker with physical access to a locked device may be able to view sensitive user information. This issue is fixed in iOS 26.3 and iPadOS 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.6 | CVE-2026-20674 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to a locked device. By accessing the device, the attacker may be able to retrieve sensitive user information that should otherwise be protected. This can lead to unauthorized access to personal data stored on the device.
Affected Products
- iOS 26.3: The latest version of Apple’s mobile operating system for iPhones, addressing the privacy issue.
- iPadOS 26.3: The latest version of Apple’s operating system for iPads, also addressing the privacy issue.
Mitigation
To mitigate this issue, users should update their devices to the latest versions of iOS and iPadOS. Regularly updating devices ensures that known vulnerabilities are patched and sensitive data remains protected.