ZDI-CAN-29438
HIGH 7.8
Upcoming
Mar 26, 2026
Meta
Meta, the technology company behind Facebook and related services, has a local vulnerability (CVE pending) with a high severity rating of 7.8 that requires user interaction but no authentication to exploit. The flaw allows an attacker with local access to achieve high-impact damage including data theft, system modification, and denial of service. Security teams should monitor for patches after the July 2026 vendor deadline and prioritize this issue for systems where local access controls may be weak.
Advisory Details
Researcher
Mat Powell of TrendAI Zero Day Initiative
Reported
March 26, 2026
Deadline
July 24, 2026
99d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H