PT-2026-27532 · Apple · Macos Tahoe+3

Published 2026-02-11 · Updated 2026-04-15 · CVE-2026-20639

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions macOS Sequoia version 15.7.5 macOS Sonoma version 14.8.5 macOS Tahoe version 26.3

Description An integer overflow issue existed due to inadequate input validation. Processing a specially crafted string could result in heap corruption.

Recommendations Update macOS to version 15.7.5. Update macOS to version 14.8.5. Update macOS to version 26.3.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-04652

CVE-2026-20639

Affected Products

Apple Macos

Macos Sequoia

Macos Sonoma

Macos Tahoe

References · 7

• https://support.apple.com/en-us/126796 · Vendor Advisory
• https://support.apple.com/en-us/126795 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04652 · Security Note
• https://support.apple.com/en-us/126348 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20639 · Security Note
• https://twitter.com/CVEarity/status/2044461413067067665 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20639 · Note