ZDI-26-231 LOW 3.8 Published Mar 30, 2026

Apple macOS Exposure of Sensitive Information to Unauthorized Sphere Information Disclosure Vulnerability

Apple

CVE-2026-20695 is a local information disclosure vulnerability affecting Apple macOS that requires an attacker to already have low-privileged code execution on a target system. Successful exploitation allows attackers to access sensitive information on the affected device. Given the low CVSS score of 3.8 and local-only attack vector, security teams should prioritize patching as part of routine updates while focusing resources on preventing initial code execution through endpoint protection and user security awareness.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy