Apple Call History Privacy Vulnerability Allowing User Fingerprinting

A privacy vulnerability has been identified in the Call History component of Apple software, including macOS Tahoe 26, iOS 26, and iPadOS 26. This vulnerability allows apps to fingerprint users by accessing sensitive information without proper authorization. The issue stems from inadequate redaction of personal data, which could enable applications to track or identify users based on their call history or related metadata.

Impact

Exploitation of this vulnerability could lead to unauthorized user fingerprinting, allowing apps to track or identify users based on their call-related data.