Product:
macOS
Summary
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue allows an app to potentially access user-sensitive data. The problem has been fixed in several versions of macOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-20699 |
Exploitation
To exploit this vulnerability, an attacker would need local access to an affected Intel-based Mac computer. By bypassing the code-signing restrictions, the attacker could potentially access sensitive user data without proper authorization.
Affected Products
- macOS Sequoia 15.7.5 – Fixed the downgrade issue with additional code-signing restrictions.
- macOS Sonoma 14.8.5 – Addressed the vulnerability to prevent unauthorized access to user data.
- macOS Tahoe 26.3 – Implemented security measures to mitigate the risk of data exposure.
- macOS Tahoe 26.4 – Further strengthened code-signing restrictions to enhance security.
Mitigation
To mitigate this vulnerability, users should ensure that their macOS is updated to the latest version where the issue has been addressed. Regularly applying security updates and patches is crucial to protect against potential exploits.