CVE-2026-20648

Description

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices.

PUBLISHED Reserved 2025-11-11 | Published 2026-02-11 | Updated 2026-02-12 | Assigner apple

Problem types

A malicious app may be able to access notifications from other iCloud devices

Product status

References

support.apple.com/en-us/126348

cve.org (CVE-2026-20648)

nvd.nist.gov (CVE-2026-20648)

Download JSON