Sindre Sorhus

An access control issue exists where a malicious application could potentially access restricted system interfaces or launder launch attribution.

A path handling issue exists due to insufficient validation, which may allow an application to break out of its sandbox. A sandbox is a security mechanism for separating running programs from one another and from the system.

An app may be able to bypass network restrictions due to insufficient checks.

A race condition exists due to improper handling of symbolic links, which are shortcuts that point to another file or directory. This flaw may allow an application to modify protected areas of the file system.

An application may be able to read sensitive location information due to insufficient data protection.

An authorization issue exists due to improper state management, which could allow an application to read sensitive location information.

An authorization issue exists where improved access control is required to prevent an app from potentially accessing sensitive user data.

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed.

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to read the device's name.

An information disclosure issue exists where an app may be able to access sensitive user data. This was addressed by implementing improved privacy controls.

An app may be able to access sensitive user data due to insufficient entitlement checks. Entitlements are restrictions that limit a program's access to protected system resources.