Product:
iOS, iPadOS, macOS, visionOS
Summary
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3. An app may be able to gain root privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-20615 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The application could leverage the path handling issue to gain elevated privileges, potentially allowing unauthorized access to system resources and sensitive data.
Affected Products
- iOS: Affected version allows apps to gain root privileges.
- iPadOS: Similar vulnerability as iOS, enabling root access through malicious apps.
- macOS Tahoe: Vulnerability allows apps to exploit path handling for elevated privileges.
- macOS Sonoma: Same issue as Tahoe, affecting app security and system integrity.
- visionOS: Vulnerable to the same path handling issue, allowing potential root access.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, macOS Sonoma, and visionOS. Regularly applying security updates is crucial to protect against potential exploits.