---
id: CVE-2026-20623
title: A permissions issue was addressed by removing the vulnerable code
summary: >-
  A permissions issue was addressed by removing the vulnerable code. This issue
  is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to
  access protected user data.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'
cwe:
  - CWE-200
vendor: apple
product: macos
affected:
  - macos < 26.3
patched:
  - macos 26.3
published: '2026-02-11'
updated: '2026-08-21'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-20623'
references:
  - url: 'https://support.apple.com/en-us/126348'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/126349'
    label: product-security@apple.com
tags:
  - nvd
epss: 0.00141
epssPercentile: 0.02777
ingestedAt: '2026-08-21T03:06:25.358Z'
---

## Overview

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access protected user data.

## Affected

- `macos < 26.3`

## Remediation

Upgrade past the affected range:

- `macos 26.3`