ZDI-CAN-29217 HIGH 7.8 Upcoming Mar 26, 2026

Meta

Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit, potentially allowing attackers with local access to compromise system confidentiality, integrity, and availability. The vulnerability affects local systems rather than remote targets and is particularly concerning because it can cause significant damage once exploited. Security teams should monitor for this advisory's public disclosure around late July 2026 and prepare patches immediately, as local vulnerabilities with high impact ratings are attractive targets for privilege escalation attacks.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported March 26, 2026
Deadline July 24, 2026 99d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy