Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access user-sensitive data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-04-15 | 1 | General1 |
| 2026-05-20 | 1 | Patch1 |
@mysk_co This one is similar to my CVE-2026-20633, patched in macOS 26.4 too. However, my bug doesn’t require any user interaction. I can’t disclose the details right now because I have already submitted a bypass report 🫣
Post summary
The author confirms a CVE similar to a previous one, noting it is patched in macOS 26.4 and requires no user interaction, but withholds further technical details pending a submitted bypass report.
⚡ New CVE Alert: CVE-2026-20633 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-20633 #CVE-2026-20633 #CVE #CyberSecurity #InfoSec https://t.co/pVDJTvHJDi
Post summary
The tweet merely announces a new CVE with no additional details beyond a link to the NVD entry.
🚨 MacOS users: A recent vulnerability in how symlinks are handled could expose sensitive data. Upgrade to Sequoia 15.7.5, Sonoma 14.8.5, or Tahoe 26.4 ASAP to protect yourself! 🔒 Stay secure and share your updates! #MacOS #CyberSecurity Read more: https://www.tenable.com/cve/CVE-2026-20633
Post summary
A new vulnerability affecting symlink handling on macOS could expose sensitive data; users are advised to update to the latest OS releases (Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.4) to mitigate the issue.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |