{"id":3205,"date":"2026-09-28T20:07:39","date_gmt":"2026-09-28T20:07:39","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3205"},"modified":"2026-09-28T20:07:39","modified_gmt":"2026-09-28T20:07:39","slug":"apple-patches-coregraphics-flaw-possibly-exploited-in-targeted-attacks","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3205","title":{"rendered":"Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Sep 28, 2026<\/span><\/span>Vulnerability \/ Endpoint Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks.<\/p>\n

The vulnerability, tracked as CVE-2026-86950<\/strong>, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file.<\/p>\n

The iPhone maker said the issue was addressed with improved bounds checking. It credited Meta Product Security with discovering and reporting the issue.<\/p>\n

\u00abApple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27,\u00bb it added.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

However, the company offered no details on how many individuals were targeted, if any of those attempts were successful, or when the first instance of CVE-2026-86950 exploitation occurred.<\/p>\n

The shortcoming has been addressed in the following devices and operating system versions –<\/p>\n