CVE-2026-20688 — Vulnetix

CVE-2026-20688 PUBLISHED CVSS 9.300000190734863 CRITICAL

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.

EPSS 0.01% · 1.1th percentile

Risk Scores

CVSS 3.1

9.300000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Score

0.01%

1.1th percentile

Affected Products

Vendor	Product	Versions
Apple	macOS	0, 0, 0
apple	ipados	0
apple	iphone_os	0
apple	macos	14.0, 26.0, 15.0
Apple	visionOS	0
apple	visionos	0
Apple	iOS and iPadOS	0

Exploit Intelligence

CIRCL seen: CVE-2026-20688 (circl-sighting)
CIRCL seen: CVE-2026-20688 (circl-sighting)
CIRCL seen: CVE-2026-20688 (circl-sighting)
https://support.apple.com/en-us/126796 (circl)
https://support.apple.com/en-us/126799 (circl)
https://support.apple.com/en-us/126792 (circl)
https://support.apple.com/en-us/126794 (circl)
https://support.apple.com/en-us/126795 (circl)
macos_v1_generated.go (github-poc)
ios_v2_generated.go (github-poc)

…and 18 more exploits

Timeline

Mar 25, 2026 CVE Published
Mar 25, 2026 EPSS Score
Mar 25, 2026 Coalition ESS Score
Mar 25, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 29, 2026 Security Advisory
May 18, 2026 EPSS Score
May 19, 2026 EPSS Score
May 20, 2026 EPSS Score
May 21, 2026 EPSS Score
May 22, 2026 EPSS Score

References

https://support.apple.com/en-us/126796 url
https://support.apple.com/en-us/126799 url
https://support.apple.com/en-us/126792 url
https://support.apple.com/en-us/126794 url
https://support.apple.com/en-us/126795 url
https://support.apple.com/en-us/126793 advisory
https://support.apple.com/en-us/126798 advisory
https://support.apple.com/en-us/126800 advisory
https://support.apple.com/en-us/126797 advisory
https://support.apple.com/en-us/126801 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-20688 advisory

Open in Interactive Console →