High · 8.8 CVE-2026-20667 EUVD-2026-5930GHSA-2jp6-x3f3-3m72

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.…

Published Feb 11, 2026 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: watchOS Platform: iOS Platform: macOS

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app may be able to break out of its sandbox.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 26.3	26.3
Apple	macOS	< 14.8.4, < 15.7.4, < 26.3	14.8.4
Apple	watchOS	< 26.3	26.3

Advisories 4

WID-SEC-2026-0403 Apple macOS Tahoe, Sequoia und Sonoma: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 8, 2026
WID-SEC-2026-0402 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 24, 2026
NCSC-2026-0064 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Feb 13, 2026
NCSC-2026-0063 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Feb 13, 2026

References