medium5.5
CVE-2026-20638
A logic issue was addressed with improved checks.
Impact
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying information leaked to the extensions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 26.3 |
| Apple | Iphone Os | before 26.3 |