Product:
macOS Tahoe
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to monitor keystrokes without user permission. The vulnerability has been fixed in macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-20601 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can run locally on the affected system. Once installed, the app could monitor keystrokes without the user’s consent, potentially capturing sensitive information such as passwords and personal data.
Affected Products
- macOS Tahoe: The latest version addresses the permissions issue that allows keystroke monitoring.
Mitigation
To mitigate this vulnerability, users should update to macOS Tahoe 26.3 or later. Regularly updating software and being cautious about the applications installed on the system can help prevent exploitation of similar vulnerabilities.