Skip to content
ThreatCluster

Apple Addresses CoreGraphics Zero-Day Flaw with Urgent Patch

First seen 30 Sep 2026, 19:28 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 30, 2026 at 20:30 UTC
  • •Apple patched a critical zero-day vulnerability in CoreGraphics on September 30, 2026.
  • •The flaw, CVE-2026-1234, allows arbitrary code execution via malicious PDF files.
  • •Users are urged to update their devices immediately due to active exploitation.

On September 30, 2026, Apple released a patch for a zero-day vulnerability in CoreGraphics that was in the wild. This flaw, identified as CVE-2026-1234, affects macOS and iOS systems, allowing attackers to execute arbitrary code through maliciously crafted PDF files. Users are advised to update their devices immediately to mitigate potential risks. The vulnerability was reportedly targeted in ongoing attacks, prompting Apple to act swiftly. The patch is available for all supported versions of macOS and iOS. Security researchers have noted the urgency of applying this update due to the observed. No specific numbers of affected users or systems have been disclosed, but the potential impact is significant given the widespread use of Apple devices.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-30
Apple releases patch for CVE-2026-1234
Apple issued an urgent update to fix a critical zero-day vulnerability in CoreGraphics that was being actively exploited.
Macobserver

More articles in this cluster (2)

Extracted Entities (2)

1 / 2

Common questions

What systems are affected by CVE-2026-1234?
The vulnerability affects all supported versions of macOS and iOS.
How urgent is the patch for this vulnerability?
The patch is urgent due to confirmed active exploitation in the wild.
What should users do to protect their devices?
Users should update their macOS and iOS devices immediately to the latest version.