Apple iOS and iPadOS Telephony Entitlement Check Vulnerability Allowing Access to Sensitive Data

A vulnerability exists in the Telephony framework of Apple iOS and iPadOS, specifically in versions 18.7.3 and 26.2. This vulnerability allows apps to access user-sensitive data due to insufficient entitlement checks. The issue has been addressed in the same versions where it was found.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user data, including payment tokens and Safari history.

Remediation

Users can update to iOS 26.2 or iPadOS 26.2. For those on iOS 18.7.3 or iPadOS 18.7.3, the update is also available.