CVE-2026-20625

published 2026-02-11

CVE-2026-20625: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C H I N A N

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
apple	macos	< 14.8.4	14.8.4
apple	macos	< 15.7.4	15.7.4
apple	macos	< 26.3	26.3
apple	macos	>= 14.0 < 14.8.4	14.8.4
apple	macos	>= 15.0 < 15.7.4	15.7.4
apple	macos	>= 26.0 < 26.3	26.3
apple	macos_sequoia	—	—
apple	macos_sonoma	—	—
apple	macos_tahoe	—	—
apple	visionos	< 26.3	26.3
apple	visionos	—	—

CWE-22