CVE-2026-20631

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Mar 25, 2026

CISA due date

—

The record

A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges.

Ecosystem	Package	Introduced	Fixed