What is the CVSS score of CVE-2026-20670?

CVE-2026-20670 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Apple are affected by CVE-2026-20670?

Organizations using An authorization should be aware of moderate risk from CVE-2026-20670 rated CVSS 5.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-20670?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Apple CVE-2026-20670

EUVD-2026-15055 MEDIUM

2026-03-25 apple

GHSA-6hg7-v5xr-46g2

Information Disclosure Apple

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

26.3,14.8.4

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15055

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:31 nvd

MEDIUM 5.5

DescriptionNVD

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access sensitive user data.

AnalysisAI

An authorization bypass vulnerability in macOS allows applications to access sensitive user data through improper state management. The vulnerability affects macOS Sonoma 14.8.4 and earlier versions, as well as macOS Tahoe 26.3 and earlier, enabling unprivileged apps to circumvent authorization checks and obtain restricted user information. Apple has addressed this issue through patched releases, and no public exploitation activity or proof-of-concept code has been reported at this time.

Technical ContextAI

This vulnerability stems from insufficient state management in macOS authorization controls, classified as an information disclosure issue. The root cause involves authorization state not being properly validated or maintained during application execution, allowing apps to retain or escalate access to sensitive user data beyond their granted permissions. Affected products include the complete macOS platform (CPE: cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*), indicating the vulnerability exists in core operating system authorization mechanisms rather than a specific application component. The flaw represents a breach of the principle of least privilege in macOS's security model, where application sandbox and entitlement-based access controls have been bypassed due to state management weaknesses.

RemediationAI

Users should immediately upgrade to macOS Sonoma 14.8.4 or later, or macOS Tahoe 26.3 or later, depending on their current OS version. The patches can be downloaded and installed through System Settings > General > Software Update, or by visiting https://support.apple.com/en-us/126348 and https://support.apple.com/en-us/126350 for manual download options. For organizations unable to immediately patch, implement restrictive application allowlisting policies to limit which apps can execute, monitor system logs for suspicious data access patterns, and consider restricting user account privileges to standard (non-administrator) accounts where feasible. Additionally, review installed applications and disable those not essential to business operations, as this reduces the attack surface for malicious apps attempting to exploit the authorization bypass.