Product:
macOS
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to access sensitive user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-20697 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that takes advantage of the permissions issue to access sensitive user data without proper authorization. The attack can be executed over a network, requiring low complexity and no user interaction, making it easier for attackers to target users.
Affected Products
- macOS Sequoia: Fixed in version 15.7.5, addresses permissions issues.
- macOS Sonoma: Fixed in version 14.8.5, resolves vulnerabilities related to sensitive data access.
- macOS Tahoe: Fixed in version 26.4, enhances restrictions on app permissions.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates and patches can help protect against potential exploitation of this and other vulnerabilities.