Apple Multiple Products Out-of-Bounds Write Vulnerability

A critical out-of-bounds write vulnerability exists in Apple's CoreGraphics framework affecting iOS, macOS, and iPadOS. The vulnerability, tracked as CVE-2026-86950, may allow an attacker to achieve arbitrary code execution on affected devices. It has been flagged by CISA and is subject to BOD 26-04 prioritization directives requiring timely remediation. Multiple Apple support advisories have been published addressing the issue across product lines. The vulnerability is classified as high severity and organizations are urged to apply available patches promptly. CISA has also noted forensics triage requirements associated with this vulnerability under their implementation guidance. The NVD entry confirms the vulnerability details and severity rating.