High · 7.8 CVE-2026-20615 EUVD-2026-6181GHSA-82p2-ccrf-wxw5

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS …

Published Feb 11, 2026 · Updated Aug 21, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: visionOS Platform: iOS Platform: macOS

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to gain root privileges.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 26.3	26.3
Apple	macOS	< 14.8.4, < 15.7.4, < 26.3	14.8.4
Apple	visionOS	< 26.3	26.3

Advisories 4

WID-SEC-2026-0403 Apple macOS Tahoe, Sequoia und Sonoma: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 8, 2026
WID-SEC-2026-0402 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 24, 2026
NCSC-2026-0064 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Feb 13, 2026
NCSC-2026-0063 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Feb 13, 2026

References