Product:
macOS, iOS, iPadOS, visionOS, Safari
Summary
A path handling issue was addressed with improved logic. This issue allows a remote user to potentially write arbitrary files. The vulnerability has been fixed in several versions of Apple’s operating systems and Safari.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20660 |
Exploitation
To exploit this vulnerability, an attacker would need to send a specially crafted request to the affected system. If successful, this could allow the attacker to write arbitrary files on the target device. The attack requires network access, making it a remote exploitation scenario.
Affected Products
- macOS Tahoe
- macOS Sonoma
- iOS
- iPadOS
- visionOS
- Safari
Mitigation
Users are advised to update their devices to the latest versions of macOS, iOS, iPadOS, visionOS, and Safari to mitigate this vulnerability. Regularly applying security updates is crucial to protect against potential exploits.