Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950
ID: 71559622-6dee-58e9-89a7-904919f8c172
STIX ID: report--71559622-6dee-58e9-89a7-904919f8c172
Feed Name: Security Affairs
Threat Score
Apple patched a critical CoreGraphics zero-day (CVE-2026-86950) — an out-of-bounds write in font rendering that can enable arbitrary code execution when processing crafted files — and stated it may have been exploited in “extremely sophisticated” targeted attacks; public PoC and researcher analysis (showing a font-in-PDF crash) are now circulating, raising urgency to apply vendor updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.