Apple iOS and iPadOS Privacy Vulnerability Allowing Circumvention of App Privacy Report Logging

A vulnerability exists in iOS and iPadOS that allows apps to bypass logging mechanisms intended for the App Privacy Report. This issue arises from insufficient entitlement checks, which could enable apps to access sensitive user data or manipulate privacy-related functionalities. The vulnerability is present in multiple versions of iOS and iPadOS, including iOS 18.7.8 and iPadOS 18.7.8, as well as iOS 26.3 and iPadOS 26.3.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user data or privacy features, allowing apps to manipulate or misrepresent user privacy behaviors.

Remediation

Users can update to iOS 18.7.9, iPadOS 18.7.9, iOS 26.4, or iPadOS 26.4 to address this vulnerability.