Post #2011188
2026-04-22 22:32 UTC
@tumainidaniel @signalapp the wording in the post indicated that IOS fixed a bug where is it was keeping notification data for apps that were deleted. That implies that notification data for apps that haven't been deleted might still be vulnerable the same way
Replies (1)
-
@bob_zim@infosec.exchange 2026-04-23 00:19
@wesley @tumainidaniel @signalapp The issue (it isn’t really a “vulnerability” in the traditional sense) was that the OS would keep a persistent cache of notification contents even after the notification was deleted or the application was deleted. This cache could be read to see the contents which applications sent to the OS for use in past notifications. The fix is to clean up the cache more aggressively. Now, deleting an application should cause any notifications it has sent to be deleted from the OS cache. Deleting a notification should also cause it to be deleted from the cache.