7.5
High
CVE-2026-20650 A denial-of-service issue was addressed with improved validation
Description
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| macOS 26.3 | earliest → < 26.3 | 26.3 |
| watchOS 26.3 | earliest → < 26.3 | 26.3 |
| visionOS 26.3 | earliest → < 26.3 | 26.3 |
| iOS and iPadOS 26.3 | earliest → < 26.3 | 26.3 |
| tvOS 26.3 | earliest → < 26.3 | 26.3 |
Other CVEs of macOS
The 3813 CVEs of macOS →
CVE-2026-86925
An authorization issue was addressed with improved state management
5.5
Medium
CVE-2026-84627
A buffer overflow was addressed with improved bounds checking
7.8
High
CVE-2026-113945
An out-of-bounds read was addressed with improved bounds checking
5.5
Medium
CVE-2026-65327
A logic issue was addressed with improved checks
8.4
High