Apple iOS and iPadOS Notes App Cache Handling Vulnerability Allowing Access to Locked Note Images

A vulnerability exists in the Notes application on Apple devices running iOS 18.7, iPadOS 18.7, iOS 26, and iPadOS 26. This issue allows an attacker with physical access to an unlocked device to view an image from the most recently accessed locked note. The vulnerability arises from improper cache management, which has been addressed in the latest software updates.

Impact

Exploitation of this vulnerability could lead to unauthorized access to images in locked notes, potentially exposing sensitive information.

Remediation

Users can update to iOS 18.7, iPadOS 18.7, iOS 26, or iPadOS 26 to address this vulnerability.