ZDI-CAN-29186 HIGH 8.8 Upcoming Mar 26, 2026

Apple

Apple has disclosed a high-severity vulnerability (CVSS 8.8) that can be exploited remotely without authentication or special privileges, requiring only user interaction to trigger, and potentially compromising confidentiality, integrity, and availability across Apple's systems or products. Based on the CVSS vector, this is a network-based attack with low complexity that bypasses authentication requirements, making it broadly exploitable once weaponized. Security teams should monitor for exploitation attempts targeting Apple users and prepare patches, as the vendor deadline of July 24, 2026 indicates this will likely become public knowledge relatively soon.

Advisory Details
Researcher Anonymous
Reported March 26, 2026
Deadline July 24, 2026 99d
CVSS Vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy