Apple Keychain Data Backup Vulnerability Allowing Access to Sensitive Information

A vulnerability exists in the handling of keychain data backups on iOS, iPadOS, and visionOS. This issue allows sensitive keychain information to be accessed from an iOS backup, potentially leading to unauthorized disclosure of personal data. The vulnerability arises from inadequate data access restrictions, which have been addressed in the latest versions of the operating systems.

Impact

Exploitation of this vulnerability could result in the unauthorized access and disclosure of sensitive keychain data, including passwords and other personal information, from an iOS backup.

Remediation

Users can update to iOS 18.4, iPadOS 18.4, or visionOS 2.4 to address this vulnerability.