Product:
macOS
Summary
An authorization issue was addressed with improved state management. This issue allows an app to potentially access sensitive user data. The problem has been fixed in macOS Sonoma 14.8.4 and macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20670 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. Given the low attack complexity and required privileges, an attacker with local access could leverage this flaw to gain unauthorized access to sensitive user data.
Affected Products
- macOS Sonoma 14.8.4: This version includes the fix for the authorization issue.
- macOS Tahoe 26.3: This version also addresses the vulnerability.
Mitigation
Users are advised to update to the latest versions of macOS Sonoma or macOS Tahoe to mitigate the risk associated with this vulnerability. Regularly applying security updates is essential to protect sensitive data.