iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix

A publicly disclosed iOS sandbox escape vulnerability, dubbed 'worse_query', allows malicious applications to read files belonging to other apps, potentially exposing cryptocurrency seed phrases, private keys, and login credentials. The core problem is that a proof-of-concept exploit is publicly available while Apple has not confirmed whether its recent updates actually address the flaw, leaving users in an ambiguous security state. This matters because attackers can weaponize public exploit code quickly, and the absence of vendor confirmation makes it impossible for defenders to know whether patching resolves the risk. Organizations and individuals relying on iOS devices to store sensitive financial or identity data face elevated exposure until Apple explicitly validates a fix.