Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Apple has released security updates addressing CVE-2026-86950, an out-of-bounds write vulnerability in the CoreGraphics component affecting older versions of iOS, iPadOS, and macOS. The flaw can lead to arbitrary code execution when a maliciously crafted file is processed. Apple indicated the vulnerability may have been exploited in targeted attacks, suggesting potential zero-day or limited exploitation in the wild. The patches were issued to protect users from potential compromise via specially crafted files. The vulnerability impacts Apple's CoreGraphics framework, a fundamental graphics rendering component across Apple platforms. Users of affected older OS versions are urged to apply the updates promptly given the possibility of active exploitation.