PT-2026-27530 · Apple · Apple Macos

Publicado 2026-03-24 · Atualizado 2026-05-20 · CVE-2026-20633

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.5 macOS versions prior to 14.8.5 macOS versions prior to 26.4

Description An application may be able to access user-sensitive data due to improved handling of symlinks.

Recommendations Update macOS to version 15.7.5 or later. Update macOS to version 14.8.5 or later. Update macOS to version 26.4 or later.

Correção

DoS

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

BDU:2026-04659

CVE-2026-20633

Produtos afetados

Apple Macos

Referências · 8

• https://support.apple.com/en-us/126796 · Aviso do Fabricante
• https://twitter.com/patch1t/status/2056996634148663470 · Publicação no Twitter
• https://support.apple.com/en-us/126795 · Aviso do Fabricante
• https://support.apple.com/en-us/126794 · Aviso do Fabricante
• https://twitter.com/CVEarity/status/2044461288047395186 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-20633 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-04659 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20633 · Nota