Apple iOS and iPadOS Authorization Vulnerability Allowing Access to Sensitive User Data

A vulnerability exists in iOS and iPadOS that allows an application to access sensitive user data due to an authorization issue. This vulnerability has been addressed with improved state management. It affects several different versions and ranges of iOS and iPadOS, specifically versions 26.3 and 18.7.5, on devices including iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information.

Remediation

Users can update to iOS 26.3 or iPadOS 26.3, or to iOS 18.7.5 or iPadOS 18.7.5 to address this vulnerability.