CVE-2026-20679: Apple macOS Sequoia vulnerability

Published Aug 21, 2026

Updated

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.

Affected Software

3 affected components

Apple macOS Sequoia=15.7.5

Apple macOS Sonoma=14.8.5

Apple macOS Tahoe=26.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS to a version that resolves this vulnerability.
Fixed in 15.7.5
Upgrade
Upgrade macOS to a version that resolves this vulnerability.
Fixed in 14.8.5
Upgrade
Upgrade macOS to a version that resolves this vulnerability.
Fixed in 26.4

Event History

Aug 21, 2026

CVE Published

via MITRE·12:38 AM

Data Sourced

via MITRE·12:38 AM

DescriptionWeakness

Frequently Asked Questions

Which macOS releases contain the fix?

The issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.

What must an attacker do to trigger the issue?

An attacker would need to cause processing of a maliciously crafted file. The stated impact is unexpected application termination.

Is there a documented workaround if updates cannot be installed immediately?

No workaround is provided in the available information. Until the relevant macOS update is installed, avoid processing files from untrusted sources where practical.