CVE-2026-20662
published 2026-02-11CVE-2026-20662: An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical…
PriorityP418medium4.6CVSS 3.1
AVPACLPRNUINSUCHINAN
EPSS
0.15%
5.1th percentile
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical access to a locked device may be able to view sensitive user information.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 26.3 | 26.3 |
| apple | macos | < 15.7.4 | 15.7.4 |
| apple | macos | >= 26.0 < 26.3 | 26.3 |
| apple | macos_sequoia | — | — |
| apple | macos_tahoe | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fqf2-x743-9564: An authorization issue was addressed with improved state management
ghsa_unreviewed·2026-02-12
CVE-2026-20662 [MEDIUM] CWE-200 GHSA-fqf2-x743-9564: An authorization issue was addressed with improved state management
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical access to a locked device may be able to view sensitive user information.
Apple
CVE-2026-20662: macOS Sequoia 15.7.4
vendor_apple·2026-02-11·CVSS 4.6
CVE-2026-20662 [MEDIUM] CVE-2026-20662: macOS Sequoia 15.7.4
Apple Security Update: About the security content of macOS Sequoia 15.7.4
Product: macOS Sequoia
Version: 15.7.4
CVE: CVE-2026-20662
Component: Siri
Impact: An attacker with physical access to a locked device may be able to view sensitive user information
Description: An authorization issue was addressed with improved state management.
Apple
CVE-2026-20662: macOS Tahoe 26.3
vendor_apple·2026-02-11·CVSS 4.6
CVE-2026-20662 [MEDIUM] CVE-2026-20662: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20662
Component: Siri
Impact: An attacker with physical access to a locked device may be able to view sensitive user information
Description: An authorization issue was addressed with improved state management.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-02-11
Published