Security Advisory

CVE-2026-20638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-11 22:58:34
Last updated 2026-04-02 18:19:24
Assigner apple
CVSS score not scored
State PUBLISHED

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying information leaked to the extensions.