This vulnerability allows a user to view restricted content—content that is meant to be concealed—directly from the lock screen. The issue stems from insufficient checks in the lock‑screen display logic, enabling the disclosure of protected information to anyone who can access the device while it is locked. The primary impact is a privacy violation with potential leaks of sensitive personal data.

Apple iOS and iPadOS devices running versions prior to 26.5 are affected. Apple addressed the issue in iOS 26.5 and iPadOS 26.5, so installations of those or later releases are not vulnerable.

The EPSS score is <1%, indicating a very low probability of exploitation. The CVSS score of 7.5 suggests moderate to high severity for a privacy violation. This vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a local user who can unlock the device to view restricted content, and the risk level appears to be low‑to‑moderate. The risk stems mainly from the ease of interaction—any user who can unlock the device can potentially see the restricted content—making it a low‑to‑moderate security concern for affected users. Nonetheless, the privacy impact warrants prompt remediation.