Apple iOS and iPadOS App Enumeration Vulnerability

A vulnerability exists in the LaunchServices component of Apple iOS and iPadOS, specifically in versions 26.3 and 18.7.5. This vulnerability allows an app to enumerate a user's installed applications, potentially leading to unauthorized access to user data or privacy violations. The issue arises from inadequate logging sanitation, which can be exploited to gain insights into the user's app usage.

Impact

Exploitation of this vulnerability could allow an app to access a list of installed applications on the user's device, which may include sensitive or private apps.

Remediation

Users can update to iOS 26.3 or iPadOS 26.3, or to iOS 18.7.5 or iPadOS 18.7.5, where this vulnerability has been fixed.