CVEvulnerability
CVE-2026-20620
7.7 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.7 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Weaknesses
- CWE-125
Description
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An attacker may be able to cause unexpected system termination or read kernel memory.
Affected configurations
• apple macos (>= 14.0 < 14.8.4)
• apple macos (>= 15.0 < 15.7.4)
• apple macos (>= 26.0 < 26.3)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/126348 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/126349 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/126350 Release Notes, Vendor Advisory