CTI · reviewed · 2026-09-29

Apple patches CoreGraphics out-of-bounds write CVE-2026-86950

Full story & timeline

MITRE ATT&CK

• T1203 Exploitation for Client Execution Execution

Indicators

Observables tied to this case, from the curated feed. raw sidecar

• cybersecurefox.com domain · active · corroborated

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html
• https://support.apple.com/en-us/149226
• https://9to5mac.com/2026/09/28/ios-26-7-1-available-now-for-iphone-with-security-fixes/
• https://malware.news/t/apple-emergency-patch-for-ios-26-macos26-macos15-cve-2026-86950-mon-sep-28th/125965#post_1
• https://securityonline.info/exploited-apple-zero-day-vulnerability-cve-2026-86950/?utm_source=mastodon&utm_medium=jetpack_social
• https://isc.sans.edu/diary/rss/33376
• https://securityexpress.info/apple-patches-zero-day-ios-26-7-1/?utm_source=mastodon&utm_medium=jetpack_social
• https://www.securityweek.com/apple-patches-meta-reported-zero-day-linked-to-extremely-sophisticated-attack/
• https://zubiqo.com/news/apple-patches-critical-coregraphics-zero-day-discovered-by-meta-0cptxk
• https://www.bleepingcomputer.com/news/security/apple-patches-coregraphics-zero-day-flaw-exploited-in-attacks/
• https://gbhackers.com/apple-fixes-ios-zero-day/
• https://cyberpress.org/apple-patches-iphone-coregraphics-flaw/