Apple plugs image-processing hole ripe for spyware abuse
ID: 300c07eb-0b76-5898-b0a9-24d8252f51c5
STIX ID: report--300c07eb-0b76-5898-b0a9-24d8252f51c5
Feed Name: The Register (Security)
Threat Score
Apple released security updates for iPhone, iPad, Mac, and Vision Pro addressing multiple flaws—most notably CVE-2026-65346, an ImageIO integer-overflow that could allow arbitrary code execution via crafted images, and CVE-2026-65329, a Telephony component authentication issue that could permit traffic interception; experts warn image-parsing vulnerabilities are commonly used for zero-click spyware delivery and recommend immediate installation of the patches.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.