CVE-2026-20667Disclosure(apple / ipados)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch apple ipados systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app may be able to break out of its sandbox.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ipados
  • iphone_os
  • macos
  • watchos

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
ipadosiphone_osmacoswatchos

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-12: 2Patch / Workaround · 2026-02-12: 1Technical Details · 2026-02-12: 102-12
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-20667 Sandbox Bypass Vulnerability in Apple iOS, macOS, and watchOS Pla... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20667 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The post announces CVE-2026-20667 as a sandbox bypass vulnerability for Apple platforms and points to Vulmon for more information.

    0000046
    4.0K followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-20667 A logic issue was addressed with improved checks. This issue is fixed in watchOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 26.3 and iPadO… https://www.cve.org/CVERecord?id=CVE-2026-20667

    Post summary

    Apple has released updates fixing CVE-2026-20667 across multiple OS versions, addressing a logic issue with improved checks.

    00000393
    56.5K followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
OSapplewatchos---

Explore more