Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when…

security

Sources

Vulnerabilities

Why this score
Signals contributing to the severity score
SignalPoints
kev added50
ssvc active35
vendor exploited40
epss high20
public poc — 1 repositories20
widely deployed15
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads · TechNews