Apple iOS and iPadOS Live Captions Authorization Vulnerability Allowing Access to Sensitive Information

A vulnerability exists in the Live Captions feature of iOS 26.3 and iPadOS 26.3, as well as in iOS 18.7.5 and iPadOS 18.7.5. This vulnerability arises from an authorization issue that was not properly managed, potentially allowing an attacker with physical access to a locked device to view sensitive user information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information on a locked device.

Remediation

Users can update to iOS 26.3, iPadOS 26.3, iOS 18.7.5, or iPadOS 18.7.5 to address this vulnerability.