ZDI-26-176
HIGH 7.8
Published
Mar 10, 2026
Apple macOS libusd_ms Alembic File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Apple
A high-severity remote code execution vulnerability (CVE-2026-20616) has been discovered in Apple macOS that allows attackers to execute arbitrary code if a user receives and interacts with a malicious file. The vulnerability requires user interaction to exploit, making it a delivery-based attack that relies on social engineering. Security teams should prioritize deploying Apple's security patches to affected macOS systems and reinforce user awareness training to avoid opening suspicious files from untrusted sources.