Product:
macOS
Summary
A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access information about a user’s contacts. This issue is fixed in macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-20681 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. By running a malicious application, the attacker could potentially access sensitive information about the user’s contacts due to insufficient data redaction in log entries.
Affected Products
- macOS Tahoe 26.3: Fixed the privacy issue related to log entries and contact information access.
Mitigation
Users are advised to update to macOS Tahoe 26.3 to mitigate this privacy issue. Regularly updating software can help protect against vulnerabilities and ensure that privacy measures are in place.