CVE-2026-20639

7.5 highEPSS 0.6%

High (7.5) in apple macos. EPSS 0.6% chance of exploitation in the next 30 days.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2026-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos

References

https://support.apple.com/en-us/126348
https://support.apple.com/en-us/126795
https://support.apple.com/en-us/126796

Check your stack JSON