Apple Face Gallery Apple Account Fingerprinting Vulnerability

A vulnerability exists in the Face Gallery component of Apple Watch, iOS, and iPadOS, specifically in versions prior to watchOS 11.2, iOS 18.2, and iPadOS 18.2. This vulnerability allows a system binary to fingerprint a user's Apple Account, potentially enabling tracking of the user's activity. The issue was caused by improper handling of certain flags, which has been addressed in the latest software updates.

Impact

Exploitation of this vulnerability could lead to unauthorized tracking of a user's activity by fingerprinting their Apple Account.

Remediation

Users can update to watchOS 11.2, iOS 18.2, or iPadOS 18.2 to address this vulnerability.