ZDI-26-176 HIGH 7.8 Published Mar 10, 2026

Apple macOS libusd_ms Alembic File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Apple

A high-severity remote code execution vulnerability (CVE-2026-20616) has been discovered in Apple macOS that allows attackers to execute arbitrary code if a user receives and interacts with a malicious file. The vulnerability requires user interaction to exploit, making it a delivery-based attack that relies on social engineering. Security teams should prioritize deploying Apple's security patches to affected macOS systems and reinforce user awareness training to avoid opening suspicious files from untrusted sources.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy