Apple iOS and iPadOS App Enumeration Vulnerability

A logic vulnerability allowing apps to enumerate a user's installed applications has been identified in Apple iOS and iPadOS. This issue affects iPhone XS and later models, as well as various iPad Pro, iPad Air, iPad, and iPad mini models, all through version 18.4. The vulnerability arises from insufficient checks, which could enable an app to access information about other installed apps on the device.

Impact

Exploitation of this vulnerability could lead to unauthorized enumeration of installed apps, potentially allowing for privacy violations or targeted attacks based on the apps identified.

Remediation

Users can update to iOS 18.5 or iPadOS 18.5 to address this vulnerability.