Product:
macOS
Summary
This issue was addressed through improved state management. An attacker with root privileges may be able to delete protected system files. The issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2026-20693 |
Exploitation
To exploit this vulnerability, an attacker must have root privileges on the affected system. Once access is gained, the attacker can manipulate the state management of the system to delete protected system files, potentially leading to system instability or data loss.
Affected Products
- macOS Sequoia 15.7.5 – Fixed version addressing the vulnerability.
- macOS Sonoma 14.8.5 – Fixed version addressing the vulnerability.
- macOS Tahoe 26.4 – Fixed version addressing the vulnerability.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest versions of macOS, specifically Sequoia 15.7.5, Sonoma 14.8.5, or Tahoe 26.4. Regularly updating the operating system will help protect against potential exploitation.