Skip to content
Apple Patches Zero-Day CVE-2026-86950 Linked to Sophisticated Attacks

Apple Patches Zero-Day CVE-2026-86950 Linked to Sophisticated Attacks

First seen 29 Sep 2026, 11:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 11:09 UTC
  • •CVE-2026-86950 is a zero-day vulnerability in CoreGraphics allowing arbitrary code execution.
  • •The flaw may have been exploited in targeted attacks against specific individuals.
  • •Apple's updates are available for iOS 26.7.1 and macOS Tahoe 26.7.1, among others.

On September 29, 2026, Apple released updates for iOS and macOS to address a zero-day vulnerability tracked as CVE-2026-86950. This flaw, an out-of-bounds write issue in the CoreGraphics component, could allow arbitrary code execution via specially crafted files. The vulnerability may have been exploited in targeted attacks against specific individuals using versions of iOS prior to iOS 27. Apple learned of the issue from Meta's product security team, which is significant given a similar incident involving WhatsApp last year. The malicious file could potentially be delivered through web pages, email attachments, or messaging apps, enabling zero-click exploitation. The patched versions include iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1. Currently, there is no information on the specific attacks exploiting this vulnerability, and CISA has yet to add CVE-2026-86950 to its KEV catalog. This incident marks the ninth Apple product flaw added to the catalog this year.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-08-21
CVE-2025-43300 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-08-29
CVE-2025-55177 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-25
CVE-2026-48842 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-11
CVE-2026-65660 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-22
CVE-2026-87902 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-27
CVE-2026-88771 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-27
CVE-2026-88772 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-28
CVE-2026-86950 published
Apple disclosed a zero-day vulnerability in CoreGraphics that can be exploited for arbitrary code execution.
Securityweek
2026-09-29
Apple releases patches
Apple released iOS 26.7.1 and macOS updates to patch CVE-2026-86950, addressing potential exploitation.
Securityweek

More articles in this cluster (2)

Following this threat?

Track Apple and CVE-2025-43300 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (28)

1 / 3