Product:
macOS, iOS, iPadOS
Summary
A logic issue was addressed with improved checks. This issue affects multiple Apple operating systems. Turning off Load remote content in messages may not apply to all mail previews.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-20673 |
Exploitation
The vulnerability can be exploited by sending specially crafted messages that bypass the intended security checks. An attacker can leverage this flaw to manipulate how content is loaded in messages, potentially leading to unauthorized access or data exposure.
Affected Products
- macOS Sequoia
- iOS
- iPadOS
- macOS Tahoe
- macOS Sonoma
Mitigation
To mitigate this issue, users are advised to update their devices to the latest versions of macOS, iOS, and iPadOS. Additionally, disabling the Load remote content in messages feature can help reduce the risk of exploitation.