PT-2026-7777 · Apple · Apple Macos

Morris Richman + 1 · Published 2026-02-11 · Updated 2026-02-12 · CVE-2026-20646

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.3

Description A logging issue existed due to insufficient data redaction. This allowed a malicious application to potentially read sensitive location information.

Recommendations Update to macOS version 26.3.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2026-02310

CVE-2026-20646

Affected Products

Apple Macos

References · 6

• https://support.apple.com/en-us/126348 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-20646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20646 · Security Note
• https://bdu.fstec.ru/vul/2026-02310 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20646 · Note
• https://twitter.com/CVEnew/status/2021799493927305376 · Twitter Post