Product:
macOS, iOS, iPadOS, visionOS
Summary
This issue was addressed with improved checks. A malicious app may be able to gain root privileges. The issue is fixed in macOS Sequoia 15.7.4, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-20626 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on the target device. Given the low attack complexity and local attack vector, the attacker could gain root privileges without requiring user interaction, allowing them to execute arbitrary code with elevated permissions.
Affected Products
- macOS Sequoia: Fixed in version 15.7.4
- iOS: Fixed in version 26.3
- iPadOS: Fixed in version 26.3
- macOS Tahoe: Fixed in version 26.3
- visionOS: Fixed in version 26.3
Mitigation
Users are advised to update their devices to the latest versions of macOS, iOS, iPadOS, and visionOS to mitigate the risk associated with this vulnerability. Regularly applying updates can help protect against potential exploits.