A permission flaw in iOS and iPadOS allows an application to enumerate the list of apps installed on a user’s device. The weakness results in the inadvertent exposure of application information, which can be leveraged to infer user preferences or installed security solutions. The flaw maps to Information Exposure and Improper Authorization, indicating that the operating system failed to enforce proper boundaries on app visibility.

All Apple iOS and iPadOS devices running versions prior to 18.3 are affected. The issue applies to iPhone OS and iPadOS platforms, encompassing all device models that have not yet upgraded to the 18.3 release.

With a CVSS score of 3.3 the vulnerability is classified as low severity, and an EPSS score of less than 1% indicates a very low probability of exploitation. The flaw is not listed in the CISA KEV catalog, further suggesting limited real-world impact. Exploitation requires the presence of a malicious or compromised app on the device, typically targeting users who inadvertently install such software.