CVE-2026-20700 (CVSS 9.8) Exploited by AI Malware via React2Shell

Back Purple-Ops

CVE-2026-20700 (CVSS 9.8) Exploited by AI Malware via React2Shell

Purple-Ops • February 13, 2026

Share: View original

CVE-2026-20700 is a critical memory corruption zero-day in Apple's dynamic linker (dyld) with a CVSS score of 9.8. Threat actors are using Large ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apple Addresses Zero-Day Flaw Exploited in Sophisticated Attacks Apple has released security updates to address a zero-day vulnerability, tracked as CVE-2026-20700, that was exploited in highly sophisticated attacks targeting specific individuals. The flaw, an arbitrary code execution vulnerability in dyld, affects multiple Apple operating systems, including iOS and macOS, allowing attackers with memory write capability to execute arbitrary code on affected devices. 51 sources 60

Extracted Entities

Attack Types (2)

Malware Zero-day Exploit

CVEs (1)

Malware (1)