Product:
macOS Tahoe
Summary
A logging issue was addressed with improved data redaction. A malicious app may be able to read sensitive location information. This issue is fixed in macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-20646 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. The app could potentially access sensitive location data that should have been redacted, allowing the attacker to gather information about the user’s whereabouts.
Affected Products
- macOS Tahoe: The latest version addresses the logging issue that could expose sensitive location information.
Mitigation
To mitigate this issue, users should ensure they are running the latest version of macOS Tahoe, which includes the necessary fixes for the logging issue. Regular updates and security patches should be applied to maintain system integrity.