CVE-2026-43657

Analyzed Analyzed - Analysis Complete

Permissions Issue in iOS and iPadOS Allows App Enumeration

Publication date: 2026-08-25

Last updated on: 2026-08-31

Assigner: Apple Inc.

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-31

Generated

2026-09-15

AI Q&A

2026-08-25

EPSS Evaluated

2026-09-13

NVD

CVE-2026-43657

EUVD

EUVD-2026-65740

Affected Vendors & Products

Vendor	Product	Version / Range
apple	iphone_os	to 26.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is a permissions issue in iOS 26.5 and iPadOS 26.5 where a malicious app may be able to list or enumerate other installed apps on a device. It was addressed with additional restrictions in these updates.

Detection Guidance

This vulnerability is specific to iOS and iPadOS versions prior to 26.5. Detection involves checking your device's iOS/iPadOS version. Go to Settings > General > About and verify the version number. If it is below 26.5, the device is vulnerable.

Impact Analysis

An attacker could exploit this to identify installed apps on your device, potentially revealing sensitive information about your usage patterns or installed software. This could aid in further targeted attacks or privacy breaches.

Compliance Impact

The provided CVE data does not specify how this vulnerability affects compliance with standards like GDPR or HIPAA. The issue involves a permissions problem allowing enumeration of installed apps, which may not directly impact data protection regulations unless sensitive app data is exposed.

Mitigation Strategies

Update your iOS or iPadOS devices to version 26.5 or later to address the permissions issue that could allow a malicious app to enumerate installed apps.

Hi! I’m here to help you understand CVE-2026-43657. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70