Apple fixes exploitable CoreGraphics vulnerability CVE-2026-86950
On September 28, 2026, Apple released the iOS 26.7.1 and iPadOS 26.7.1 security updates. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
CERT24