Product:
macOS
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue may allow an app to access sensitive user data. The vulnerability has been fixed in several versions of macOS and visionOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20625 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. By manipulating directory paths, the attacker could potentially gain unauthorized access to sensitive user data. User interaction is required, as the attacker would need to convince the user to run a malicious application that takes advantage of this parsing issue.
Affected Products
- macOS Sequoia
- macOS Tahoe
- macOS Sonoma
- visionOS
Mitigation
To mitigate this vulnerability, users should update their systems to the latest versions of macOS and visionOS where the issue has been addressed. Regularly applying security updates and patches is essential to protect against potential exploits.