CVE-2026-20648Published
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15.8.2, macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-20648 · Microsoft / collected KEV context