21:04Machine-translated from Azerbaijani by AIRead in Azerbaijani
Apple patches zero-day vulnerability that allows arbitrary code execution
Apple has released security updates to patch a zero-day vulnerability in the CoreGraphics graphics system. A zero-day vulnerability is a security flaw exploited in attacks before the manufacturer develops a fix. According to the company, this vulnerability may have been used in sophisticated attacks against specific individuals before iOS 27 was released. The fix is included in the iOS 26.7.1 and iPadOS 26.7.1 updates.
CoreGraphics is a 2D graphics system that processes images, text and other visual elements. The vulnerability, tracked as CVE-2026-86950, has a severity rating of 8.8 points. A specially crafted malicious file could execute arbitrary code on the device. The issue could also cause applications to crash and data to become corrupted. The update has been released for the iPhone 11 and newer models. The fix also covers 12.9-inch iPad Pro models starting with the 3rd generation. The list includes 11-inch iPad Pro models starting with the 1st generation and iPad Air models starting with the 3rd generation. The 8th-generation and newer iPad, as well as iPad mini models starting with the 5th generation, will also be updated.
A fix has also been released for Mac devices running macOS Sequoia 15.8.1 and macOS Tahoe 26.7.1. Apple resolved the issue by strengthening memory bounds checks. The vulnerability was discovered by the Meta Product Security team. The identity of the attacker and the individuals who were targeted have not been disclosed. The company advises diplomats, journalists, political opposition figures, activists and whistleblowers not to delay installing the update. If automatic updates are enabled, the fix will be delivered to the device automatically. Other users can install the new version by going to Settings, General and Software Update. This is the 2nd zero-day vulnerability Apple has patched in 2026. The company addressed 7 such vulnerabilities in 2025.
CoreGraphics is a 2D graphics system that processes images, text and other visual elements. The vulnerability, tracked as CVE-2026-86950, has a severity rating of 8.8 points. A specially crafted malicious file could execute arbitrary code on the device. The issue could also cause applications to crash and data to become corrupted. The update has been released for the iPhone 11 and newer models. The fix also covers 12.9-inch iPad Pro models starting with the 3rd generation. The list includes 11-inch iPad Pro models starting with the 1st generation and iPad Air models starting with the 3rd generation. The 8th-generation and newer iPad, as well as iPad mini models starting with the 5th generation, will also be updated. A fix has also been released for Mac devices running macOS Sequoia 15.8.1 and macOS Tahoe 26.7.1. Apple resolved the issue by strengthening memory bounds checks. The vulnerability was discovered by the Meta Product Security team. The identity of the attacker and the individuals who were targeted have not been disclosed. The company advises diplomats, journalists, political opposition figures, activists and whistleblowers not to delay installing the update. If automatic updates are enabled, the fix will be delivered to the device automatically. Other users can install the new version by going to Settings, General and Software Update. This is the 2nd zero-day vulnerability Apple has patched in 2026. The company addressed 7 such vulnerabilities in 2025.