Apple NetworkExtension Entitlement Check Vulnerability Allowing App Enumeration of Installed Apps

A vulnerability exists in the NetworkExtension framework of Apple products, including visionOS, tvOS, iPadOS, and macOS Sequoia. This vulnerability allows apps to enumerate a user's installed applications, potentially leading to unauthorized access or misuse of sensitive information. The issue arises from insufficient entitlement checks, which have been addressed in the latest software updates.

Impact

Exploitation of this vulnerability could allow an app to access information about all other apps installed on the device, which could be used to infer sensitive user data or application usage patterns.

Remediation

Users can update to the latest versions of iOS, iPadOS, tvOS, macOS Sequoia, or visionOS to address this vulnerability.