Product:
macOS
Summary
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20648 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on the target device. This app could potentially access sensitive notifications from other iCloud devices, compromising user privacy. User interaction is required to execute the malicious app, making it essential for the attacker to trick the user into installing or running the application.
Affected Products
- macOS Tahoe 26.3 – Fixed the privacy issue by relocating sensitive data.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS. Regularly updating the operating system will help protect against known vulnerabilities. Additionally, users should be cautious about the applications they install and run on their devices.