Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
iOS and macOS apps may escape their boundaries
CVE-2026-20688
Summary
A software update has fixed a security issue that could allow a malicious app to break out of its normal restrictions and access sensitive areas of the operating system. This issue has been addressed in the latest updates for iOS, iPadOS, macOS, and visionOS. Update your software to the latest version to fix this issue.
Original title
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may...
Original description
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.
Published: 25 Mar 2026 · Updated: 25 Mar 2026 · First seen: 25 Mar 2026