Apple has released security patches for older iPhones and iPads to address a zero-day vulnerability in CoreGraphics that was exploited in sophisticated targeted attacks. The company discovered the out-of-bounds write weakness, tracked as CVE-2026-86950, affects a framework used for graphics and image rendering across Apple’s operating systems. Meta Product Security identified the flaw, which could allow attackers to execute arbitrary code by writing data outside allocated memory buffers.
The backported patches are now available for iPhone XS, iPhone XS Max, iPhone XR, and various iPad models. Apple confirmed the vulnerability was exploited in highly targeted attacks against specific individuals using older iOS versions. While the company emphasized the patches target only limited, sophisticated attacks, users are strongly advised to install the updates to prevent potential exploitation.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
