Apple patches CoreGraphics flaw exploited in targeted attacks
Apple released security updates on September 28, 2026 for older iOS, iPadOS, and macOS versions to fix CVE-2026-86950, an out-of-bounds write in CoreGraphics that allows arbitrary code execution via maliciously crafted files. Apple stated the vulnerability may have been exploited in highly sophisticated targeted attacks.