CVE-2026-20630

Published: Feb 11, 2026Modified: Aug 21, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access protected user data.

Affected (1)

Products: Apple: Macos

Apple

1 product

Macos

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	Before 26.3

Related CWEs

CWE-277

Insecure Inherited Permissions

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

References (3)

https://support.apple.com/en-us/126348

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/126349

Source: product-security@apple.com

https://support.apple.com/en-us/126350

Source: product-security@apple.com

Timeline

No history available yet.