What is the CVSS score of CVE-2026-20633?

CVE-2026-20633 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-20633?

Organizations using This should be aware of moderate risk from CVE-2026-20633 rated CVSS 5.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-20633?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

macOS CVE-2026-20633

EUVD-2026-15041 MEDIUM

Improper Link Resolution Before File Access (CWE-59)

2026-03-25 apple

GHSA-9cv6-73mr-84fw

Apple Information Disclosure macOS

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

15.7.5,26.4,14.8.5

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15041

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:35 nvd

MEDIUM 5.5

DescriptionCVE.org

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access user-sensitive data.

AnalysisAI

This vulnerability involves improper handling of symbolic links (symlinks) in macOS, which could allow an application to access sensitive user data without proper authorization. The issue affects multiple macOS versions including Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4, representing an information disclosure vulnerability with potential impact on user privacy. Apple has released patches to address the symlink handling deficiency, though specific attack complexity and exploitation metrics are not publicly detailed.

Technical ContextAI

The vulnerability exists in the macOS operating system's symlink handling mechanism, which is a core file system feature used across all CPE variants matching cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*. Symlinks (symbolic links) are references to other files or directories that the operating system must resolve transparently. The root cause relates to insufficient validation or isolation when applications access symlinked resources, potentially allowing them to traverse to sensitive file system locations containing user data. This falls under the CWE category of improper access control and path traversal vulnerabilities. The issue fundamentally concerns how macOS validates and restricts application access to symlink targets, particularly when those targets contain sensitive user information.

RemediationAI

Apply Apple's security updates immediately: upgrade macOS Sequoia to version 15.7.5 or later, macOS Sonoma to version 14.8.5 or later, or macOS Tahoe to version 26.4 or later. These patches directly address the symlink handling deficiency. Users can enable automatic security updates through System Preferences > General > Software Update to ensure future patches are applied promptly. As an interim control prior to patching, users should limit application installation to trusted sources only and review application permissions through System Preferences > Security & Privacy > App Management. Enterprise administrators should validate patch deployment across their macOS fleet and use Mobile Device Management (MDM) solutions to enforce minimum OS versions.