highCVE
Apple Backports CoreGraphics Flaw Fix to Older iPhones and iPads
CVE-2026-86950 (CVSS 8.8) Out-of-Bounds Write Exploited in the Wild
Cyber.TechVoid1 min read
Key Takeaways
- Apple backported fixes for CVE-2026-86950, an out-of-bounds write in CoreGraphics, to older iPhone and iPad devices.
- The vulnerability has a CVSS score of 8.8 and was exploited in the wild.
- Successful exploitation could allow arbitrary code execution via maliciously crafted files.
- Original patches were released in September 2026; older devices received the fix this week.
Related Security News
criticalCVE
CISA Issues Urgent Advisory on Critical PHP Vulnerabilities Tracked as 'php2shell'
CISA has issued a strong advisory urging immediate patching of critical vulnerabilities in PHP, identified as CVE-2026-109618 and CVE-2026-109619. Dubbed 'php2shell,' these flaws enable unauthenticated remote code execution and affect every PHP installation processing web requests. While no active exploitation has been observed, the widespread prevalence of PHP presents significant risk if left unpatched. Affected versions include those prior to the specified security releases, and organizations are advised to update immediately or take systems offline.
CISA Advisories2 min read
