CVE-2026-20640

MEDIUM

iOS <26.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and view screenshots of sensitive data from the iPhone during iPhone Mirroring with Mac.

Scores

CVSS v3 4.6
EPSS 0.0002
EPSS Percentile 6.4%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-703
Status published
Products (3)
Apple/iOS and iPadOS < 26.3
apple/ipados < 26.3
apple/iphone_os < 26.3
Published Feb 11, 2026
Tracked Since Feb 18, 2026