Product:
macOS, iOS, iPadOS
Summary
This issue was addressed by removing the vulnerable code. An app may be able to bypass certain Privacy preferences. The issue is fixed in multiple versions of macOS and iOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-20606 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the device and could potentially manipulate the app’s behavior to bypass privacy settings. This requires user interaction, making it less likely for remote exploitation but still poses a risk if the device is compromised.
Affected Products
- macOS Tahoe
- macOS Sonoma
- macOS Sequoia
- iOS
- iPadOS
Mitigation
Users are advised to update their devices to the latest versions of macOS and iOS to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits.