CoreGraphics

Apple has released patches for CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics affecting older versions of iOS, iPadOS and macOS. Processing a maliciously crafted file could allow arbitrary code execution. Apple says the flaw may already have been exploited in targeted attacks, prompting users of older devices to update promptly.

Apple has released an emergency security patch fixing a zero-day vulnerability in CoreGraphics that was actively exploited in real-world attacks. The flaw affects iPhones and other Apple devices, renewing debate about how secure iOS really is. Commenters note that no system is 100 percent safe and urge users to update their devices promptly.

Apple is dealing with a newly disclosed zero-day vulnerability, CVE-2026-86950, affecting CoreGraphics on iPhone, iPad and Mac. The out-of-bounds write flaw can allow arbitrary code execution, and Apple has confirmed it was exploited in what the company describes as 'extremely sophisticated' targeted attacks. Security updates are rolling out, and users are advised to install them promptly.

Apple has patched CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics that could allow code execution when a device processes a maliciously crafted file. The flaw was reportedly exploited in an 'extremely sophisticated' attack targeting specific individuals on iOS versions before 27. It was reported by Meta Product Security and has been added to CISA's Known Exploited Vulnerabilities catalog, with a remediation deadline of October 2.