Product:
macOS Tahoe
Summary
An authorization issue was addressed with improved state management. This issue allows an app to potentially access sensitive user data. The vulnerability has been fixed in the latest version of macOS Tahoe.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20696 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. Given the low attack complexity and required privileges, an unprivileged user could potentially execute the app to gain unauthorized access to sensitive user data.
Affected Products
- macOS Tahoe: The latest version addresses the authorization issue that could allow apps to access sensitive user data.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS Tahoe, which includes the necessary fixes. Regularly updating software and monitoring for security advisories can help protect against similar vulnerabilities.