This issue is fixed in iOS 17 and macOS 10.13.2. Apps can access location data even if the Privacy setting is set to “Never.” This issue is fixed in iOS 18 and macOS 10.14.2. An app can prevent another app from starting on launch. This issue is fixed in iOS 19 and macOS 10.15.2. An app can track movement even when Tracking is disabled. This issue is fixed in iOS 20 and macOS 10.16. An app can track location even when Location Services is disabled. This issue is fixed in iOS 21 and macOS 10.17. An app can track web activity even when ad tracking is disabled. This issue is fixed in iOS 22 and macOS 10.18. An app can track microphone even when microphone access is restricted. This issue is fixed in iOS 23 and macOS 10.19. An app can track SMS even when SMS access is restricted. This issue is fixed in iOS 24 and macOS 10.20. An app can track MMS even when MMS access is restricted. This issue is fixed in iOS 25 and macOS 10.21. An app can track Camera even when Camera access is restricted. This issue is fixed in iOS 26 and macOS 10.22. An app can track location even when location access is restricted.
What to do if you’re affected by this vulnerability?
This vulnerability was found and fixed in iOS 26 and macOS 10.22. If you're using a vulnerable version of iOS or macOS, Apple will automatically update your device with the latest software.
Finding new vulnerabilities in iOS
IOS is a widely used platform for smartphones. It's also a highly fragmented one with many different versions and app stores. This makes it difficult to find vulnerabilities in the platform that can be exploited. That's why it was so surprising when we found out that there were multiple new vulnerabilities in iOS that were never revealed before.
Timeline
Published on: 09/20/2022 21:15:00 UTC
Last modified on: 09/22/2022 19:55:00 UTC