Mmastodon TechnologyCybersecurity first seen 2 h ago, last 2 h ago, peak #9

Apple patches actively exploited CoreGraphics flaw in iOS

Original: 🤖 Apple patches CVE-2026-86950: CoreGraphics out-of-bounds write allowing code execution from a crafted file. Exploited

Apple has patched CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics that could allow code execution when a device processes a maliciously crafted file. The flaw was reportedly exploited in an 'extremely sophisticated' attack targeting specific individuals on iOS versions before 27. It was reported by Meta Product Security and has been added to CISA's Known Exploited Vulnerabilities catalog, with a remediation deadline of October 2.

Why now: The flaw was actively exploited against targeted individuals, and CISA has set an urgent patch deadline of October 2.

AppleMetaCISAiOSCoreGraphics

Open on mastodon →

Evidence

• 🤖 Apple patches CVE-2026-86950: CoreGraphics out-of-bounds write allowing code execution from a crafted file. Exploited in an "extremely sophisticated" attack against targeted individuals on iOS before 27. Added to CISA KEV (fix by Oct 2). Reported by Meta Product Security. 🔗… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/463422