Product:
macOS, iOS, iPadOS, visionOS
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue may allow an app to access sensitive user data. The issue has been fixed in several versions of macOS, iOS, iPadOS, and visionOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20653 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that takes advantage of the parsing issue in directory paths. The attacker would then need to convince a user to install and run this application, which could lead to unauthorized access to sensitive user data.
Affected Products
- macOS Tahoe
- macOS Sonoma
- macOS Sequoia
- iOS
- iPadOS
- visionOS
Mitigation
Users are advised to update their devices to the latest versions of macOS, iOS, iPadOS, and visionOS to mitigate this vulnerability. Regularly updating software can help protect against potential exploits.