CVE-2026-20673

Published: Feb 11, 2026Modified: Apr 2, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. Turning off "Load remote content in messages” may not apply to all mail previews.

Affected (5)

Products: Apple: Ipados, Iphone Os, Macos

3 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 18.7.5
Apple Iphone Os	Before 18.7.5
Apple Macos	Before 14.8.4
Apple Macos	From 15.0 to 15.7.4
Apple Macos	From 26.0 to 26.3

References (4)

https://support.apple.com/en-us/126347

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/126348

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/126349

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/126350

Source: product-security@apple.com

Release NotesVendor Advisory

Timeline

No history available yet.