ZDI-CAN-28695
LOW 3.3
Upcoming
Mar 05, 2026
Apple
Apple has a local vulnerability (CVE pending) with low severity that requires user interaction to exploit but could lead to minor information disclosure. The vulnerability is locally exploitable without authentication, meaning an attacker must have access to the target system and trick a user into performing an action. Security teams should monitor for the official patch release before the July 2026 deadline and assess exposure within their macOS, iOS, or iPadOS environments, though the low impact suggests this is not an immediate priority.
Advisory Details
Researcher
Anonymous
Reported
March 05, 2026
Deadline
July 03, 2026
78d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N