ZDI-CAN-29240 LOW 3.3 Upcoming Feb 19, 2026

Apple

Apple has a low-severity local vulnerability (CVSS 3.3) that requires user interaction to exploit but poses minimal risk, affecting only confidentiality through information disclosure with no authentication requirements. The vulnerability can only be exploited by attackers with local access to a compromised system, making it a lower-priority issue compared to remote threats. Security teams should monitor for this advisory's resolution timeline through June 2026 and apply patches when available, though immediate action is not critical given the low severity rating.

Advisory Details
Researcher Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
Reported February 19, 2026
Deadline June 19, 2026 64d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Tags

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy