CVE-2026-86950: Apple CoreGraphics Zero-Day

Reported by SOCRadar (ameer)

Summary by Cyber Security News30 Sep 2026, 16:10 CEST

About this summary. This is a short, independently written summary of an article first published by SOCRadar. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/cve-2026-86950-apple-coregraphics-zero-day/

CVE-2026-86950: Apple CoreGraphics Zero-Day Apple has issued an urgent security patch for CVE-2026-86950, a critical zero-day out-of-bounds write vulnerability in CoreGraphics that enables arbitrary code execution via malicious files. Exploited in targeted, highly sophisticated attacks against specific individuals, this flaw presents an immediate threat across affected Apple platforms. What Is CVE-2026-86950?

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

Apple Patches CoreGraphics Zero Day Exploited in Attacks

Apple patches CoreGraphics zero-day already exploited in targeted attacks

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

Apple security advisory (AV26-971)