Apple Patches CoreGraphics Zero Day Exploited in Attacks

Apple released patches for a zero-day in the CoreGraphics rendering framework (CVE-2026-86950) that may have been exploited in an “extremely sophisticated” attack against specific targeted individuals; the flaw could allow arbitrary code execution and affects iPhone 11 and later, multiple iPad models, and recent macOS Sequoia/Tahoe builds, with fixes issued in iOS/iPadOS 26.7.1 and macOS Sequoia/Tahoe 15.8.1/26.7.1. The bulletin credits Meta Product Security for discovery and also references a separate recent zero-click fix (CVE-2026-86869).