{
  "id": 10710921,
  "title": "Apple patches CoreGraphics zero-day already exploited in targeted attacks",
  "url": "https://urgent.news/2026/09/29/apple-patches-coregraphics-zero-day-already-exploited-in-targeted-10710921",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-29T14:30:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/09/29/apple-patches-coregraphics-zero-day-already-exploited-in-targeted-attacks/5299721"
  },
  "original_language": "en",
  "account": "Apple released a security patch for a critical vulnerability known as CVE-2026-86950 in its CoreGraphics framework, which is used for handling graphics across its operating systems. This zero-day flaw, also referred to as an out-of-bounds write issue, allows attackers to execute arbitrary code on vulnerable devices by processing maliciously crafted files. Apple disclosed that it was aware of an extremely sophisticated attack targeting specific individuals on iOS versions prior to iOS 27. The company has not disclosed the number of affected users, the identity of the attackers, or the exact exploitation method. The patch was rolled out on Monday in iOS 26.7.1 and iPadOS 26.7.1 and affects devices including the iPhone 11 and later, iPad Pro 12.9-inch (third generation and later), and iPad Air (third generation and later). Apple's decision to release this patch so quickly highlights the seriousness of the issue and the potential risks posed by this zero-day vulnerability.",
  "summary": "Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Apple patches CoreGraphics zero-day already exploited in targeted attacks",
        "url": "https://urgent.news/2026/09/29/apple-patches-coregraphics-zero-day-already-exploited-in-targeted",
        "published": "2026-09-29T14:30:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}