ZDI-26-173
HIGH 7.8
Published
Mar 10, 2026
Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability
Apple
Apple macOS contains a remote code execution vulnerability (CVE-2026-20611) with a CVSS score of 7.8 that can be exploited when users interact with malicious content such as visiting a compromised website or opening a malicious file. Successful exploitation allows attackers to execute arbitrary code with the privileges of the affected user. Security teams should prioritize patching macOS systems and educating users to avoid clicking suspicious links or opening untrusted files until a fix is available.