MEDIUMVulnerability
Global

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

·Source: The Hacker News

Updated:

Executive Summary

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for the flaw were released last month by Apple in

Analysis

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for the flaw were released last month by Apple in

Indicators of Compromise (1)

CVE (1)
CVE-2026-86950
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 27, 2026.

Related Threats

MEDIUMVulnerabilityPOC

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. The code causes a crash, not an execution error. Turning the memory corruption into a working

CVE-2026-86950
The Hacker News
MEDIUMVulnerability

CVE-2026-86950: The Great Glyph Grift

[object Object]

CVE-2026-86950
r/cybersecurity
CRITICALZero Day

Apple Patches CoreGraphics Zero Day Exploited in Attacks

Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine

CVE-2026-86950
Infosecurity Magazine