CVE-2026-20640
Medium · 4.6CVSS
4.6
EPSS
0.2%
Published
Feb 11, 2026
CISA due date
—
The record
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and view screenshots of sensitive data from the iPhone during iPhone Mirroring with Mac.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-703
- CVE-2026-57445 Gardens v2 is a modular governance framework that enables communities to create and… CWE-703
- CVE-2026-82417 ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own… CWE-703
- CVE-2026-26446 Stomper 5e2741e is vulnerable to Denial of Service. CWE-703
- CVE-2026-18638 Any authenticated Velociraptor user — including one holding only the readerrole — can… CWE-703
- CVE-2026-56818 Netty is an asynchronous, event-driven network application framework. CWE-703
- CVE-2026-20187 As part of Cisco's ongoing commitment to proactive security and product quality, the… CWE-703
- CVE-2026-51600 Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in… CWE-703