NewsThe Hacker News2026-10-01 05:54 UTC

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. The code causes a crash, not an execution error. Turning the memory corruption into a working

CVE-2026-86950Apple Multiple Products — Apple Multiple Products Out-of-Bounds Write Vulnerability
CVE-2026-86950Ein Lese-/Schreibzugriff außerhalb der Grenzen wurde durch verbesserte Grenzüberprüfungen behoben.
CVE-2026-86950Apple iOS, iPadOS, macOS Tahoe und Sequoia: Schwachstelle ermöglicht Codeausführung

Other advisories

CVE-2010-1801none
apple coregraphics: Sicherheitsluecke
CVE-2010-1801none
apple coregraphics: Sicherheitsluecke

Other news entries

Newsncsc-nl2026-10-01
NCSC-2026-0397 [1.00] [M/H] Kwetsbaarheid verholpen in Apple CoreGraphics
Newstheregister-security2026-09-29
Apple patches CoreGraphics zero-day already exploited in targeted attacks
Newsbleepingcomputer2026-09-29
Apple patches CoreGraphics zero-day flaw exploited in attacks
Newsthehackernews2026-09-28
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Source: https://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.html

Linked advisories

More on CoreGraphics