What is the CVSS score of CVE-2026-20668?

CVE-2026-20668 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-20668?

Organizations using A logging should be aware of moderate risk from CVE-2026-20668, a log file exposure vulnerability rated CVSS 5.5. This could allow unauthorized file access.. A patch is available.

How to fix or mitigate CVE-2026-20668?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

macOS CVE-2026-20668

EUVD-2026-15053 MEDIUM

Insertion of Sensitive Information into Log File (CWE-532)

2026-03-25 apple

Apple Information Disclosure macOS iOS

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

26.3,14.8.5,15.7.5

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15053

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:35 nvd

MEDIUM 5.5

DescriptionCVE.org

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

AnalysisAI

A logging issue in Apple's operating systems allows improper data redaction in system logs, enabling installed applications to access sensitive user data that should have been masked. This vulnerability affects iOS 18.7.7 and earlier, iPadOS 18.7.7 and earlier, iOS 26.3 and earlier, iPadOS 26.3 and earlier, macOS Sequoia 15.7.5 and earlier, macOS Sonoma 14.8.5 and earlier, macOS Tahoe 26.3 and earlier, and visionOS 26.3 and earlier. An attacker with the ability to install or control an application on an affected device could exploit inadequate log data filtering to extract confidential user information that should be protected by the operating system's redaction mechanisms.

Technical ContextAI

The vulnerability stems from insufficient data redaction mechanisms within Apple's system logging infrastructure across multiple operating system platforms (iOS, iPadOS, macOS, and visionOS). This is fundamentally an information disclosure issue (CWE category) where system logs containing sensitive data are not properly sanitized before being made accessible to third-party applications. The affected products span multiple macOS versions (Sequoia 15.x, Sonoma 14.x, and Tahoe 26.x), iOS/iPadOS versions (18.7.x and 26.3.x), and visionOS (26.3.x), as identified through the comprehensive CPE strings covering apple:ios_and_ipados, apple:macos, and apple:visionos across all version ranges. The root cause involves the logging subsystem failing to consistently apply data masking policies before exposing log entries to sandbox-isolated applications, allowing circumvention of the intended privacy boundary.

RemediationAI

Update immediately to iOS 18.7.7 or iPadOS 18.7.7 or later, iOS 26.3 or iPadOS 26.3 or later, macOS Sequoia 15.7.5 or later, macOS Sonoma 14.8.5 or later, macOS Tahoe 26.3 or later, or visionOS 26.3 or later, depending on the affected device. Consult the respective Apple security advisories at the URLs provided in the affected products section for version-specific patching guidance and verification steps. Until patches can be deployed, restrict the installation of untrusted third-party applications and review device privacy settings to limit app permissions to system logs and diagnostic data. Organizations managing fleet deployments should prioritize this update across all Apple devices given the broad affected version range and the privacy-sensitive nature of the vulnerability.