Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
// AI summary
Apple backported a fix for CVE-2026-86950, an out-of-bounds write in CoreGraphics allowing arbitrary code execution, to older iPhones and iPads exploited in real-world attacks.
// from the source
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for the flaw were released last month by Apple in