CVE-2026-20633 in macOS
Summary
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access user-sensitive data.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Responsible
apple
Reservation
11/11/2025
Disclosure
03/25/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352900 | Apple macOS Symlink information disclosure | 200 | Not defined | Official fix | CVE-2026-20633 |