This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/126346 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/126348 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/126349 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/126353 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Feb 2026, 22:05
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple iphone Os
Apple visionos Apple ipados Apple Apple macos |
|
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
|
| References | () https://support.apple.com/en-us/126346 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/126348 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/126349 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/126353 - Release Notes, Vendor Advisory |
12 Feb 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-862 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
11 Feb 2026, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-11 23:16
Updated : 2026-02-12 22:05
NVD link : CVE-2026-20626
Mitre link : CVE-2026-20626
CVE.ORG link : CVE-2026-20626
JSON object : View
Products Affected
apple
- iphone_os
- ipados
- visionos
- macos
CWE
CWE-862
Missing Authorization