Attackers can abuse URL requests processed by an email program for Mac to steal files from the victim — sometimes without user interaction.

The unpatched flaw would allow a bad actor to execute information-exfiltrating malware, backdoors, ransomware or any other kind of bad code he or she chose.