CVE-2026-20700Vulnerability
Apple Multiple Buffer Overflow Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by The Hacker News · last reported
Last reported 25 days ago
CISA KEVAdded 12 Feb 2026
Fix due 5 Mar 2026
Used by ransomware: not knownCISA KEV catalogue
Fix due 5 Mar 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS1.4%
higher than 72% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 72% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks“In February, Apple patched CVE-2026-20700, a memory corruption issue in the dynamic linker, or dyld, after reporting that it had been weaponized in sophisticated attacks.”
-
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks“Earlier this February, Apple addressed a memory corruption issue in dyld (CVE-2026-20700, CVSS score: 7.8) that it said had been weaponized in sophisticated cyber attacks.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-86950, CVE-2025-55177, CVE-2025-43300
Thanks — we review every report.