Product:
iOS, iPadOS, macOS
Summary
A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4. The features ‘Hide IP Address’ and ‘Block All Remote Content’ may not apply to all mail content.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-20692 |
Exploitation
The vulnerability can be exploited by sending specially crafted emails that bypass the privacy features intended to protect user preferences. Attackers can leverage this flaw to access user information without their consent, as the privacy settings may not function as expected.
Affected Products
- iOS 26.4: The latest version of Apple’s mobile operating system.
- iPadOS 26.4: The latest version of Apple’s operating system for iPads.
- macOS Sequoia 15.7.5: A version of Apple’s desktop operating system.
- macOS Sonoma 14.8.5: Another version of Apple’s desktop operating system.
- macOS Tahoe 26.4: A version of Apple’s desktop operating system.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, and macOS to ensure that the privacy issue is resolved. Regularly checking for software updates can help maintain security and protect user preferences.