HomeAppleCVE-2026-20640

CVE-2026-20640

MEDIUM
4.6CVSS
Published: 2026-02-11
Updated: 2026-02-17
AI Analysis

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and view screenshots of sensitive data from the iPhone during iPhone Mirroring with Mac.

CVSS Metrics

Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
physical
Complexity
low
Privileges
none
User Action
none
Scope
unchanged
Confidentiality
high
Integrity
none
Availability
none
Weaknesses
CWE-703

Metadata

Primary Vendor
APPLE
Published
2/11/2026
Last Modified
2/17/2026
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

apple : ipadosapple : iphone_os

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief