ZDI-CAN-28695 LOW 3.3 Upcoming Mar 05, 2026

Apple

Apple has a local vulnerability (CVE pending) with low severity that requires user interaction to exploit but could lead to minor information disclosure. The vulnerability is locally exploitable without authentication, meaning an attacker must have access to the target system and trick a user into performing an action. Security teams should monitor for the official patch release before the July 2026 deadline and assess exposure within their macOS, iOS, or iPadOS environments, though the low impact suggests this is not an immediate priority.

Advisory Details
Researcher Anonymous
Reported March 05, 2026
Deadline July 03, 2026 78d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Tags

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy