CVE-2026-20661 — Apple / iOS and iPadOS

CVE-2026-20661

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18.7.5; affected 0 before 26.3

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/126346
https://support.apple.com/en-us/126347

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.