Apple Patches Actively Exploited CoreGraphics Vulnerability in iOS, iPadOS, and macOS

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The iPhone maker said the flaw may have been used in limited, targeted attacks. The updates address the issue by fixing the memory corruption in the CoreGraphics rendering engine. Apple has not disclosed further details on the exploitation activity, citing ongoing investigations. Users are strongly advised to update their devices to the latest software versions to mitigate the risk. The company released patches for iOS, iPadOS, and macOS, with specific version requirements varying by platform. No public exploit code has been released, but the targeted nature of the attacks suggests active threat actor interest. Security researchers recommend applying the updates immediately, especially for users who may have received suspicious files via email, messaging, or web browsing.