CVE-2026-86950Vulnerability
Apple Multiple Products Out-of-Bounds Write Vulnerability
Reported by 16 independent sources · first reported by The Hacker News · last reported
Last reported 12 days ago
Fix due 13 Oct 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 68% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
23 reports · the newest 20, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-86950”
-
October 2026 Patch Tuesday forecast: Time for an Office cleanup“They also reported a zero-day exploit for CVE-2026-86950 and provided updates for all operating systems on September 29th.”
-
5th October – Threat Intelligence Report“Apple has patched CVE-2026-86950, a CoreGraphics memory corruption vulnerability affecting iPhones, iPads, and Macs.”
-
Bulletin d'actualité CERTFR-2026-ACT-042 (05 octobre 2026)“CVE-2026-86950”
-
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited“Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)”
-
Security Affairs newsletter Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION“Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950”
-
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950“Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950”
-
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path“Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals.”
-
CVE-2026-86950: Apple CoreGraphics Zero-Day“CVE-2026-86950: Apple CoreGraphics Zero-Day”
-
Apple Patches CoreGraphics Zero Day Exploited in Attacks“In a bulletin on September 28, the tech giant attributed the discovery of CVE-2026-86950 to the Meta Product Security team.”
-
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog“Cybersecurity and Infrastructure Security Agency (CISA) added an Apple Multiple Products flaw, tracked as CVE-2026-86950 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog.”
-
Escritura fuera de límites en productos de Apple“CVE-2026-86950: vulnerabilidad de escritura fuera de límites en el componente CoreGraphics.”
-
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks“Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.”
-
Apple patches CoreGraphics zero-day already exploited in targeted attacks“The vulnerability, tracked as CVE-2026-86950, is an out-of-bounds write flaw in CoreGraphics, Apple's framework for handling graphics across its operating systems.”
-
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks“Apple patched zero-day CVE-2026-86950 in CoreGraphics, exploited in sophisticated targeted attacks against specific iOS users.”
-
Apple security advisory (AV26-971)“Apple has indicated that CVE-2026-86950 may have been exploited.”
-
CISA Adds One Known Exploited Vulnerability to Catalog“CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability”
-
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code“The bug, CVE-2026-86950, affects CoreGraphics, an Apple framework used throughout its operating systems and apps to display and process visual content such as images and PDFs.”
-
Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)“Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)”
-
Vulnérabilité dans les produits Apple (29 septembre 2026)“Apple indique que la vulnérabilité CVE-2026-86950 est activement exploitée.”
Indicators reported together
named in the same reports- hxxps://support.apple[.]com/en-us/149226in 2 reports
- hxxps://support.apple[.]com/en-us/149228in 2 reports
- hxxps://support.apple[.]com/en-us/149229in 2 reports
- www.moxa[.]comin 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-88771, CVE-2026-88772, CVE-2026-76504, CVE-2026-85880, CVE-2026-81963, CVE-2026-104286, CVE-2026-90970, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-48842, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2026-20316
Thanks — we review every report.