CVE-2026-20617

Exploited in the Wild

NIST CVSS Scores

CVSS v3.1 Base Score: 7.0 (High)

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA CVSS Scores

CVSS v3.1 Base Score: 7.0 (High)

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Operating Systems Impacted

macOS Tahoe (prior to 26.3)
iOS 26 and iPadOS 26 (prior to 26.3)
visionOS (prior to 26.3)

Additional Resources

NVD CVE-2026-20617

Description

CVE-2026-20617 is a race condition within the CoreServices component of macOS. According to Apple's advisory, the flaw could allow an app to gain root privileges. This was a jointly-credited discovery: Golden Helm Securities, Gergely Kalman (@gergely_kalman), and Csaba Fitzl (@theevilbit) of Iru.

Impact

Exploitation of this vulnerability could allow a local app to escalate to root privileges by winning a race condition in CoreServices. Apple addressed the issue with improved state handling in macOS Tahoe 26.3.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.

Description

Impact

CVE-2026-20615

CVE-2025-24167

CVE-2024-40783

Stay up to date