Technical impact
The vulnerability was a privacy concern in iPhone Mirroring where Visual Intelligence could expose sensitive user data. The flaw was mitigated by removing the vulnerable code. Attackers with physical access could use Visual Intelligence during mirroring to access sensitive data.
Affected Systems
All Apple iOS and iPadOS devices running a version older than iOS 26.5 or iPadOS 26.5 were affected. The issue has been resolved on 26.5 for both operating systems.
Risk and Exploitability
Exploitation requires physical possession of the device and the ability to run Visual Intelligence while mirroring. The EPSS score indicates a very low exploitation probability (<1%) and the CVSS score of 4.6 indicates medium severity. Nonetheless, exposure of sensitive data remains a significant risk for devices in environments where physical access cannot be tightly controlled, and the lack of a public exploit does not diminish the urgency of applying the 26.5 update.
