AppleAnalysisApple patches actively exploited CoreGraphics zero-day across iOS and macOS
What happened.Apple published emergency security releases resolving an out-of-bounds write zero-day vulnerability in its CoreGraphics framework exploited in targeted attacks.
Why it matters.Graphics rendering engines process untrusted document formats across messaging clients and mobile systems. When memory bounds checks fail during parsing, threat actors deploy spyware payloads without requiring user interaction. Enterprise mobility managers should mandate immediate installation of iOS 27.2 and macOS updates across corporate fleets. Security teams should audit devices for irregular configuration profiles.
The technical specifications:
- Vulnerability mechanics: Tracked as CVE-2026-86950, an out-of-bounds write flaw in CoreGraphics allows crafted media files to corrupt process memory during rendering.
- Targeted exploitation: Apple acknowledged reports indicating the vulnerability was actively exploited in targeted intrusions against individuals on pre-iOS 27 releases.
- Discovery credit: Researchers within Meta Product Security discovered and reported the memory corruption flaw to Apple.
- Platform coverage: The patch addresses vulnerabilities across iOS, iPadOS, macOS Sequoia, macOS Tahoe, and legacy iOS 18.7.11 branches.
- Remediation releases: Apple released iOS 27.2, iPadOS 27.2, and macOS Sequoia 15.8.1 with reinforced input bounds checking across media libraries.