New macOS zero-day bug lets attackers run commands remotely.

[1PW]

Attribution: https://www.bleepingcomputer.com/news/apple/new-macos-zero-day-bug-lets-attackers-run-commands-remotely/

No CVE has been opened.

HTH

[treed]

The bad news is that this apparently allows arbitrary code execution, if you believe the original source.

The good news here is that they only released information about how to launch an app already present on the computer. That's not a very serious issue. As yet, nobody I know has figured out how they accomplished the arbitrary code execution. That doesn't mean nobody will, of course, but at least it means that it's not something easy for script kiddies and other unskilled attackers to use.