Our takeApple patched CVE-2026-86950, a CoreGraphics out-of-bounds write that is confirmed exploited in targeted attacks. Update all iOS, iPadOS, and macOS devices immediately.Security Resilience desk
Sources (5)
- hackernews · hackernews
- cisa_kev · cisa_kev
- helpnet · helpnet
- cccs · cccs
- register_sec · register_sec
What this means for you — Security leader:Apply the latest iOS 27, iPadOS 27, and macOS Sequoia/Sonoma updates immediately; CVE-2026-86950 is confirmed exploited in the wild via malicious files.
What this means for you — Lean IT orgs:Update every Apple device (iPhones, iPads, Macs) to the newest iOS, iPadOS, and macOS versions right away; the flaw is already being used in real attacks.
What this means for you — MSP:Push the current iOS 27, iPadOS 27, macOS Sequoia, and Sonoma patches to all managed Apple endpoints; CVE-2026-86950 is confirmed exploited in targeted attacks.
What this means for you — Researcher:CVE-2026-86950 (CoreGraphics out-of-bounds write) is listed in CISA KEV and confirmed exploited; review the Apple security updates for iOS 27, iPadOS 27, and macOS.