Apple Photos Logic Vulnerability in Hidden Album Allowing Unauthorized Access

A logic vulnerability has been identified in Apple Photos across multiple platforms, including macOS Ventura, iOS, iPadOS, and macOS Sequoia. This vulnerability allows photos in the Hidden Photos Album to be viewed without authentication. The issue arises from improper file handling, which has been addressed in the latest updates for each operating system.

Impact

Exploitation of this vulnerability allows unauthorized access to photos in the Hidden Photos Album.

Remediation

Users can update to macOS Ventura 13.7.2, iOS 18.2, iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, or macOS Sequoia 15.2 to address this vulnerability.