CVE-2026-20650

HIGH

watchOS tvOS macOS visionOS iOS iPadOS <26.3 - DoS

Title source: llm

Description

A denial-of-service issue was addressed with improved validation. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3 and iPadOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets.

References (5)

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/126346

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/126348

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/126351

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/126352

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/126353

Scores

CVSS v3 7.5

EPSS 0.0006

EPSS Percentile 19.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-400

Status published

Affected Products (6)

apple/ipados < 26.3

apple/iphone_os < 26.3

apple/macos < 26.3

apple/tvos < 26.3

apple/visionos < 26.3

apple/watchos < 26.3

Timeline

Published Feb 11, 2026

Tracked Since Feb 18, 2026