ZDI-26-311
LOW 3.3
Published
May 12, 2026
Apple macOS CoreSymbolication Out-Of-Bounds Read Information Disclosure Vulnerability
Apple
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreSymbolication framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3.