Environment Variable Handling Issue in Apple Products
CVE-2026-20627

5.5MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 11 February 2026

What is CVE-2026-20627?

A vulnerability exists in the way Apple products manage environment variables, potentially allowing unauthorized access to sensitive user data. Improved validation has been implemented to mitigate this issue in the latest versions of iOS, macOS, watchOS, and visionOS, which highlights the importance of keeping software up to date to ensure user data privacy and security.

Affected Version(s)

iOS and iPadOS 0 < 26.3

macOS 0 < 14.8.4

macOS 0 < 26.3

References

https://support.apple.com/en-us/126346

https://support.apple.com/en-us/126348

https://support.apple.com/en-us/126350

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 11, 2026
Vulnerability Reserved
Nov 11, 2025

CVE-2026-20627 Data

JSON