CVE-2026-86950

Apple Multiple Products

Parchea ya: se está explotando

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

En las noticias

• Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path · The Hacker News
• Escritura fuera de límites en productos de Apple · INCIBE-CERT
• Apple Zero-Day Vulnerability Weaponized in Targeted Attacks · Dark Reading
• Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ · SecurityWeek
• Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th) · SANS ISC
• Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks · The Hacker News