ZDI-26-173 HIGH 7.8 Published Mar 10, 2026

Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

Apple

Apple macOS contains a remote code execution vulnerability (CVE-2026-20611) with a CVSS score of 7.8 that can be exploited when users interact with malicious content such as visiting a compromised website or opening a malicious file. Successful exploitation allows attackers to execute arbitrary code with the privileges of the affected user. Security teams should prioritize patching macOS systems and educating users to avoid clicking suspicious links or opening untrusted files until a fix is available.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy