Product:
macOS Tahoe
Summary
An authorization issue was addressed with improved state management. This issue may allow an app to access sensitive user data. The vulnerability has been fixed in the latest version of macOS Tahoe.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20666 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. By leveraging the authorization issue, the attacker could potentially gain access to sensitive user data without proper permissions. This could be done through malicious applications that exploit the flaw in state management.
Affected Products
- macOS Tahoe: The latest version addresses the authorization issue that could allow unauthorized access to sensitive user data.
Mitigation
Users are advised to update to the latest version of macOS Tahoe to mitigate this vulnerability. Regularly applying security updates can help protect against similar issues in the future.