Vulnerability in Apple Macos

CVE-2026-20639

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption.

EPSS: 0.001 (18.9th percentile) — read the EPSS interpretation.

Affected products

References