What is the CVSS score of CVE-2026-20622?

CVE-2026-20622 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-20622?

CVE-2026-20622 is a privacy vulnerability in macOS that allows applications to capture user screens through temporary file mishandling, potentially exposing sensitive data without user awareness.. A patch is available.

How to fix or mitigate CVE-2026-20622?

Within 24 hours: Inventory all macOS Sequoia (pre-15.7.4) and Tahoe (pre-26.3) systems in your environment. Within 7 days: Deploy macOS Sequoia 15.7.4 or later and macOS Tahoe 26.3 or later across all affected endpoints using your standard patch management process. Within 30 days: Verify 100% patching compliance and document patch deployment timeline for audit purposes.

macOS CVE-2026-20622

EUVD-2026-15037 HIGH

Improper Access Control (CWE-284)

2026-03-25 apple

Apple Authentication Bypass macOS

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:17 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

15.7.4,26.3

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15037

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

HIGH 7.5

DescriptionCVE.org

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to capture a user's screen.

AnalysisAI

A privacy vulnerability in macOS allows applications to capture a user's screen through improper handling of temporary files. The issue affects macOS Sequoia versions prior to 15.7.4 and macOS Tahoe versions prior to 26.3, enabling unauthorized screen capture by malicious or compromised applications. This vulnerability represents an information disclosure threat where sensitive user data visible on screen could be exfiltrated without user consent or awareness.

Technical ContextAI

The vulnerability stems from inadequate security controls around temporary file handling in macOS, which relates to CWE-based information disclosure through insecure temporary file management. The affected products are identified via CPE as Apple macOS across multiple versions (cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*), indicating the flaw exists in the core operating system's file system abstraction and screen capture mechanisms. The root cause involves temporary files used by the screen capture process or related APIs not being properly isolated or protected, allowing unprivileged applications to access or monitor these files to extract screen contents.

RemediationAI

Users should immediately update to macOS Sequoia 15.7.4 or macOS Tahoe 26.3 or later, as Apple has patched the underlying temporary file handling vulnerability in these releases. The patches are available through System Preferences > Software Update. Until systems can be updated, users should review and restrict application permissions in System Preferences > Security & Privacy, disable screen sharing and remote access features if not actively needed, and monitor installed applications for suspicious behavior. Additional mitigations include using privacy screen overlays for sensitive work and reviewing application permissions regularly. For detailed patch information and validation, consult Apple's security advisories at https://support.apple.com/en-us/126348 and https://support.apple.com/en-us/126349.