Vulnerability Description
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and view screenshots of sensitive data from the iPhone during iPhone Mirroring with Mac.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 26.3 |
| Apple | Iphone Os | < 26.3 |
Related Weaknesses (CWE)
References
- https://support.apple.com/en-us/126346Release NotesVendor Advisory
FAQ
What is CVE-2026-20640?
CVE-2026-20640 is a vulnerability with a CVSS score of 4.6 (MEDIUM). An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and v...
How severe is CVE-2026-20640?
CVE-2026-20640 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-20640?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os.