ZDI-CAN-29252
HIGH 7.8
Upcoming
Feb 19, 2026
Apple
Apple has a high-severity vulnerability (CVSS 7.8) that requires local access to a user's device but no authentication or user privileges to exploit, with the potential to compromise confidentiality, integrity, and availability. The attack requires user interaction, meaning an attacker would need to trick a user into performing an action on their Mac, iPhone, iPad, or other Apple device. Security teams should monitor for patches when Apple releases its advisory on or before June 19, 2026, and educate users to avoid running untrusted files or applications.
Advisory Details
Researcher
Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
Reported
February 19, 2026
Deadline
June 19, 2026
64d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H