CVE-2026-20678 — Apple / iOS and iPadOS

CVE-2026-20678

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18.7.5; affected 0 before 26.3

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/126346
https://support.apple.com/en-us/126347

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.