Denial-of-Service Vulnerability in Apple Products

CVE-2026-20650

What is CVE-2026-20650?

A denial-of-service vulnerability has been identified that could be exploited by an attacker in a privileged network position. By sending specially crafted Bluetooth packets, an attacker may disrupt the normal functioning of devices, leading to potential downtime and service degradation. Apple has released updates including watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3, and iPadOS 26.3 that address this issue. Users are advised to update their devices promptly to mitigate this risk.

References