Product:
macOS
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue may allow an app to access sensitive user data. The vulnerability has been fixed in macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20669 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can manipulate directory paths. If the application is executed on a vulnerable system, it may gain unauthorized access to sensitive user data due to improper path validation.
Affected Products
- macOS Tahoe 26.3: Fixed the parsing issue in directory paths.
Mitigation
Users are advised to update to macOS Tahoe 26.3 to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and ensure that security measures are in place.