Apple Fixes CoreGraphics Flaw Used in Targeted Attacks
ID: 56aaebac-1bea-5ef9-8f70-34ec08a142a9
STIX ID: report--56aaebac-1bea-5ef9-8f70-34ec08a142a9
Feed Name: The Cyber Express
Threat Score
Apple released iOS 26.7.1, iPadOS 26.7.1 and matching macOS Tahoe/Sequoia updates to fix CVE-2026-86950, an out-of-bounds write in the CoreGraphics framework that can lead to arbitrary code execution when processing a maliciously crafted file. Apple states the bug may have been exploited in extremely sophisticated targeted attacks, credits Meta Product Security for reporting it, lists affected device versions, and recommends users install the available patches immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.