- Published
- Source
- The Hacker News
- Vulnerabilities
- 1 CVE Exploited
Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. The code causes a crash, not an execution error. Turning the memory…
If you run the affected product
- Find every instance – especially the ones reachable from the internet.
- Apply the vendor's patch or mitigation now: exploited flaws are fixed in days, not at the next patch cycle.
- Then check for signs it was used before you patched: web shells, new accounts, unusual outbound traffic.
More helpCISA's Known Exploited Vulnerabilities catalogue (opens in a new tab)
The vulnerabilities in this story
CVE-2026-86950 in the NVD (opens in a new tab)
- CVSS8.8High
- EPSS1.2%chance of exploitation in 30 days
- CISA KEVExploitedon the list since 29 Sep
Exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog (CC0). Exploit prediction: EPSS by FIRST. This product uses the NVD API but is not endorsed or certified by the NVD.
MyCyberWay career service
Not sure where to start?
Book a free 20-minute fit call.
Tell us where you are and where you want to be. We'll tell you honestly which programme fits – including if the answer is none of them yet.
- Twenty minutes, free
- A straight recommendation
- A person replies
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
