ZDI-26-231
LOW 3.8
Published
Mar 30, 2026
Apple macOS Exposure of Sensitive Information to Unauthorized Sphere Information Disclosure Vulnerability
Apple
CVE-2026-20695 is a local information disclosure vulnerability affecting Apple macOS that requires an attacker to already have low-privileged code execution on a target system. Successful exploitation allows attackers to access sensitive information on the affected device. Given the low CVSS score of 3.8 and local-only attack vector, security teams should prioritize patching as part of routine updates while focusing resources on preventing initial code execution through endpoint protection and user security awareness.