Dashboard / CVE-2026-20683

CVE-2026-20683

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-09-14 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
apple ipados < 27.0
apple iphone_os < 27.0
apple macos 15.0 – 15.8
apple macos 26.0 – 26.7
apple visionos < 27.0

References & Advisories (5)

https://support.apple.com/en-us/149034
Release Notes Vendor Advisory
https://support.apple.com/en-us/149035
Release Notes Vendor Advisory
https://support.apple.com/en-us/149038
Release Notes Vendor Advisory
https://support.apple.com/en-us/149042
Release Notes Vendor Advisory
https://support.apple.com/en-us/149043
Release Notes Vendor Advisory

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.19%
Raw Score 0.001890
Percentile 8.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00189
2026-10-28
0.00189

Intelligence Sources

mitre ref →

External Links