Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)

Apple has shipped iOS and macOS security updates to fix an actively exploited zero-day vulnerability (CVE-2026-86950) in the operating systems’ Core Graphics framework. “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27,” the company said, but refrained from providing additional details about the attacks or targets. About CVE-2026-86950 Core Graphics handles “path-based dr