Product:
macOS
Summary
An access issue was addressed with additional sandbox restrictions. This issue allows an app to connect to a network share without user consent. The problem has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20701 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that bypasses the sandbox restrictions. By doing so, the application could connect to a network share without requiring user consent, potentially leading to unauthorized access to sensitive data.
Affected Products
- macOS Sequoia 15.7.5 – Fixed access issue with additional sandbox restrictions.
- macOS Sonoma 14.8.5 – Addressed the vulnerability allowing unauthorized network share connections.
- macOS Tahoe 26.4 – Resolved the issue of apps connecting to network shares without user consent.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates can help protect against potential exploits and ensure that sandbox restrictions are properly enforced.