Product:
watchOS, tvOS, macOS, iOS, iPadOS, visionOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially break out of its sandbox, which could lead to unauthorized access to system resources. The issue has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-20628 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that takes advantage of the permissions issue. The app would need to be installed on a device running an affected version of the operating system. Once installed, the app could attempt to escape its sandbox environment, potentially gaining access to sensitive data or system functions.
Affected Products
- watchOS 26.3: Fixed permissions issue with additional restrictions.
- tvOS 26.3: Addressed the vulnerability to prevent app sandbox escape.
- macOS Tahoe 26.3: Updated to enhance security against this issue.
- macOS Sonoma 14.8.4: Includes fixes for the permissions issue.
- macOS Sequoia 15.7.4: Security improvements implemented.
- iOS 18.7.5: Updated to mitigate the risk of sandbox escape.
- iPadOS 18.7.5: Fixed the permissions issue.
- visionOS 26.3: Addressed the vulnerability to enhance security.
- iOS 26.3: Includes additional restrictions to prevent exploitation.
- iPadOS 26.3: Updated to fix the permissions issue.
Mitigation
To mitigate this vulnerability, users should ensure that their devices are updated to the latest versions of the operating systems mentioned. Regularly updating software helps protect against known vulnerabilities and enhances overall security.