Apple iOS and iPadOS CoreServices Permission Vulnerability Allowing App to Enumerate Installed Apps

A permissions vulnerability in the CoreServices component of Apple iOS 26.1 and iPadOS 26.1 allows apps to identify other applications installed by the user. This issue was resolved by implementing additional restrictions. The vulnerability affects iPhone 11 and later models, as well as various iPad models including the iPad Pro (all recent generations), iPad Air (3rd generation and later), iPad (8th generation and later), and iPad mini (5th generation and later).

Impact

Exploitation of this vulnerability could lead to unauthorized enumeration of a user's installed applications by a malicious app.