CVE-2026-20641
App Enumeration Privacy Issue in Apple OSes Fixed
Publication date: 2026-02-11
Last updated on: 2026-04-02
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | tvos | to 26.3 (exc) |
| apple | visionos | to 26.3 (exc) |
| apple | watchos | to 26.3 (exc) |
| apple | ipados | to 18.7.5 (exc) |
| apple | ipados | From 26.0 (inc) to 26.3 (exc) |
| apple | iphone_os | to 18.7.5 (exc) |
| apple | iphone_os | From 26.0 (inc) to 26.3 (exc) |
| apple | macos | From 15.0 (inc) to 15.7.4 (exc) |
| apple | macos | From 26.0 (inc) to 26.3 (exc) |
| apple | macos | From 14.0 (inc) to 14.8.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a privacy issue where an application may be able to identify what other applications a user has installed on their device.
The issue was addressed by implementing improved checks to prevent apps from accessing this information without authorization.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
How can this vulnerability impact me? :
This vulnerability can impact users by allowing an app to gather information about other installed apps, potentially exposing user behavior, preferences, or sensitive information indirectly.
Such information could be used for profiling, targeted advertising, or other privacy-invasive activities without the user's consent.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your Apple devices to the fixed versions of the operating systems as soon as possible.
- Update watchOS to version 26.3 or later.
- Update tvOS to version 26.3 or later.
- Update macOS Tahoe to version 26.3 or later.
- Update macOS Sonoma to version 14.8.4 or later.
- Update macOS Sequoia to version 15.7.4 or later.
- Update iOS and iPadOS to version 18.7.5 or later.
- Update visionOS to version 26.3 or later.