CVE-2024-40852 is a vulnerability in iOS and iPadOS that allowed an attacker to view recent photos without authentication via the Assistive Access feature on a locked device. The issue was addressed by restricting options available on locked devices. The vulnerability is fixed in iOS 18 and iPadOS 18.