CVE-2026-20679

Analyzed Analyzed - Analysis Complete

Unexpected App Termination in macOS via Malicious File

Publication date: 2026-08-21

Last updated on: 2026-08-24

Assigner: Apple Inc.

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-21

Last Modified

2026-08-24

Generated

2026-09-10

AI Q&A

2026-08-21

EPSS Evaluated

2026-09-09

NVD

CVE-2026-20679

EUVD

EUVD-2026-63776

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 14.0 (inc) to 14.8.5 (exc)
apple	macos	From 15.0 (inc) to 15.7.5 (exc)
apple	macos	From 26.0 (inc) to 26.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a flaw in macOS where processing a maliciously crafted file may cause an app to terminate unexpectedly. The issue was fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4 with improved checks to prevent such disruptions.

Detection Guidance

This CVE does not provide specific detection commands. The vulnerability involves processing maliciously crafted files leading to app termination. Monitor for unexpected app crashes or file processing errors in macOS Sequoia 15.7.5, Sonoma 14.8.5, or Tahoe 26.4. Ensure your system is updated to the latest patched versions to mitigate the risk.

Impact Analysis

The vulnerability could lead to unexpected app crashes when opening malicious files, potentially disrupting normal use of your device. It does not appear to allow unauthorized data access or privilege escalation based on the provided description.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability involves unexpected app termination due to maliciously crafted files, which may not directly relate to data protection or privacy requirements under these regulations.

Mitigation Strategies

Update your macOS to the latest patched version: Sequoia 15.7.5, Sonoma 14.8.5, or Tahoe 26.4 to address the vulnerability. Avoid processing untrusted files until the update is applied.

Hi! I’m here to help you understand CVE-2026-20679. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70