ZDI-CAN-29438 HIGH 7.8 Upcoming Mar 26, 2026

Meta

Meta, the technology company behind Facebook and related services, has a local vulnerability (CVE pending) with a high severity rating of 7.8 that requires user interaction but no authentication to exploit. The flaw allows an attacker with local access to achieve high-impact damage including data theft, system modification, and denial of service. Security teams should monitor for patches after the July 2026 vendor deadline and prioritize this issue for systems where local access controls may be weak.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported March 26, 2026
Deadline July 24, 2026 99d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy