ZDI-CAN-29252 HIGH 7.8 Upcoming Feb 19, 2026

Apple

Apple has a high-severity vulnerability (CVSS 7.8) that requires local access to a user's device but no authentication or user privileges to exploit, with the potential to compromise confidentiality, integrity, and availability. The attack requires user interaction, meaning an attacker would need to trick a user into performing an action on their Mac, iPhone, iPad, or other Apple device. Security teams should monitor for patches when Apple releases its advisory on or before June 19, 2026, and educate users to avoid running untrusted files or applications.

Advisory Details
Researcher Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
Reported February 19, 2026
Deadline June 19, 2026 64d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy