A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/126346 | Vendor Advisory |
| https://support.apple.com/en-us/126347 | Vendor Advisory |
| https://support.apple.com/en-us/126348 | Vendor Advisory |
| https://support.apple.com/en-us/126349 | Vendor Advisory |
| https://support.apple.com/en-us/126350 | Vendor Advisory |
| https://support.apple.com/en-us/126351 | Vendor Advisory |
| https://support.apple.com/en-us/126352 | Vendor Advisory |
| https://support.apple.com/en-us/126353 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Apr 2026, 19:21
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| Summary | (en) A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox. |
17 Feb 2026, 20:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/126346 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126347 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126348 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126349 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126350 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126351 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126352 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/126353 - Vendor Advisory | |
| First Time |
Apple watchos
Apple tvos Apple iphone Os Apple visionos Apple ipados Apple Apple macos |
|
| CPE | cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
12 Feb 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| CWE | CWE-284 |
11 Feb 2026, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-11 23:16
Updated : 2026-04-02 19:21
NVD link : CVE-2026-20628
Mitre link : CVE-2026-20628
CVE.ORG link : CVE-2026-20628
JSON object : View
Products Affected
apple
- watchos
- iphone_os
- visionos
- tvos
- ipados
- macos
CWE
CWE-284
Improper Access Control