Skip to content
OriginalSign in
Image: SecurityWeek

SecurityWeekEduard Kovacs

Apple patches 286 flaws and backports fix for exploited bug

Part of the CVE-2026-86950 story · since 28 Sep

Developinglatest 2 hours ago16 articles9 outlets
28 Sep · SANS ISC first14 Oct19 OctNowThis article16th of 16
  • Mon 28 Sep, 23:30 UTC. SANS ISC, first report. Apple Patches Exploited Zero Day Targeting Older iOS Versions. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 02:29 UTC. SecurityOnline, its first report on the story. Apple Patches Actively Exploited Zero Day Allowing Code Execution. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 06:30 UTC. SecurityWeek, its first report on the story. Apple Patches iOS Flaw Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 10:58 UTC. Malwarebytes, its first report on the story. Apple Fixes Exploited iPhone Flaw in Targeted Attacks. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 14:25 UTC. Security Affairs, its first report on the story. Apple Patches CoreGraphics Zero Day Exploited in Targeted iOS Attacks. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 15:02 UTC. CISA, its first report on the story. CISA Warns of Actively Exploited Apple CoreGraphics Flaw. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 22:00 UTC. Dark Reading, its first report on the story. Apple Patches Actively Exploited CoreGraphics Zero Day in Targeted Attacks. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 08:25 UTC. Security Affairs. CISA Flags Exploited Apple Graphics Flaw Affecting iPhones and Macs. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 09:01 UTC. Infosecurity, its first report on the story. Apple Patches CoreGraphics Zero Day Exploited in Targeted iPhone Attacks. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 09:01 UTC. SecurityOnline. Google Gemini Turns Find Hub Into a Memory Based Valuables Tracker. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 07:31 UTC. The Hacker News, its first report on the story. Apple PDF Flaw Gets PoC as CISA Warns of Targeted Exploitation. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 12:31 UTC. Security Affairs. Apple Patches CoreGraphics Zero Day Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Mon 5 Oct, 04:06 UTC. SecurityOnline. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 00:30 UTC. SANS ISC. Apple fixes 304 flaws, including one exploited in targeted attacks. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 04:30 UTC. SecurityOnline. Apple backports exploited CoreGraphics flaw fix to older iPhones. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 13:40 UTC. SecurityWeek. Apple patches 286 flaws and backports fix for exploited bug. Cites a CVE in CISA KEV. This article, 16th of 16.

Apple released iOS and iPadOS 27.2 and macOS Golden Gate 27.2, addressing 286 vulnerabilities across the two operating systems; roughly 140 flaws affect both. The iOS and iPadOS update fixes 163 vulnerabilities, including memory corruption issues in WebKit, the kernel and components that process images, fonts, PDFs, audio and video. Some could allow arbitrary code execution.

Other fixes address apps accessing sensitive data or bypassing privacy preferences, WebContent sandbox escapes, a Kerberos KDC impersonation flaw and a bug that could let a nearby attacker access a Thread network.

macOS Golden Gate 27.2 fixes 263 vulnerabilities, including more than a dozen privilege-escalation flaws that could give apps root access, as well as sandbox escapes, Gatekeeper bypasses and kernel memory corruption. Apple also patched remotely exploitable or local-network flaws in Screen Sharing, Remote Management and SMB. One Remote Management vulnerability could allow a remote attacker to execute arbitrary code.

Apple also released iOS and iPadOS 18.7.11, fixing three vulnerabilities, including CVE-2026-86950. Apple said the flaw had been exploited as a zero-day in an “extremely sophisticated attack”. Meta’s product security team discovered it; Apple had previously patched it in late September in iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1. The source says iOS and macOS 27 do not appear to be affected, and that public information about the attacks is not available.

How the story developed

All 16 articles
Developinglatest 2 hours ago16 articles9 outlets

16 articles from 9 outlets since 28 Sep. Picked up again today after 3 weeks quiet. This was the 16th report, 29 days after the first.

Now28 Sep301 Oct2345First reportSANS ISC · 28 Sep, 23:30This article16th of 16 · day 29CISA alert29 Sep, 15:02 · official
  • Mon 28 Sep, 23:30 UTC. SANS ISC, first report. Apple Patches Exploited Zero Day Targeting Older iOS Versions. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 02:29 UTC. SecurityOnline, its first report on the story. Apple Patches Actively Exploited Zero Day Allowing Code Execution. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 06:30 UTC. SecurityWeek, its first report on the story. Apple Patches iOS Flaw Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 10:58 UTC. Malwarebytes, its first report on the story. Apple Fixes Exploited iPhone Flaw in Targeted Attacks. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 14:25 UTC. Security Affairs, its first report on the story. Apple Patches CoreGraphics Zero Day Exploited in Targeted iOS Attacks. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 15:02 UTC. CISA, its first report on the story. CISA Warns of Actively Exploited Apple CoreGraphics Flaw. Cites a CVE in CISA KEV.
  • Tue 29 Sep, 22:00 UTC. Dark Reading, its first report on the story. Apple Patches Actively Exploited CoreGraphics Zero Day in Targeted Attacks. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 08:25 UTC. Security Affairs. CISA Flags Exploited Apple Graphics Flaw Affecting iPhones and Macs. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 09:01 UTC. Infosecurity, its first report on the story. Apple Patches CoreGraphics Zero Day Exploited in Targeted iPhone Attacks. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 09:01 UTC. SecurityOnline. Google Gemini Turns Find Hub Into a Memory Based Valuables Tracker. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 07:31 UTC. The Hacker News, its first report on the story. Apple PDF Flaw Gets PoC as CISA Warns of Targeted Exploitation. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 12:31 UTC. Security Affairs. Apple Patches CoreGraphics Zero Day Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Mon 5 Oct, 04:06 UTC. SecurityOnline. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 00:30 UTC. SANS ISC. Apple fixes 304 flaws, including one exploited in targeted attacks. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 04:30 UTC. SecurityOnline. Apple backports exploited CoreGraphics flaw fix to older iPhones. Cites a CVE in CISA KEV.
  • Tue 27 Oct, 13:40 UTC. SecurityWeek. Apple patches 286 flaws and backports fix for exploited bug. Cites a CVE in CISA KEV. This article, 16th of 16.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 16 articles as a list
  1. Mon 28 SepDay 01
    1. Apple Patches Exploited Zero Day Targeting Older iOS Versions23:30 · SANS ISC · First report · Exploited CVE · Known exploited CVE
  2. Tue 29 SepDay 16
    1. Apple Patches Actively Exploited Zero Day Allowing Code Execution02:29 · SecurityOnline · Known exploited CVE
    2. Apple Patches iOS Flaw Exploited in Targeted Attacks06:30 · SecurityWeek · Known exploited CVE
    3. CISA Warns of Actively Exploited Apple CoreGraphics Flaw15:02 · CISA · official · CISA alert · Known exploited CVE
    Show 3 more from 29 Sep
    1. Apple Fixes Exploited iPhone Flaw in Targeted Attacks10:58 · Malwarebytes · Known exploited CVE
    2. Apple Patches CoreGraphics Zero Day Exploited in Targeted iOS Attacks14:25 · Security Affairs · Known exploited CVE
    3. Apple Patches Actively Exploited CoreGraphics Zero Day in Targeted Attacks22:00 · Dark Reading · Known exploited CVE
  3. Wed 30 SepDay 23
    1. CISA Flags Exploited Apple Graphics Flaw Affecting iPhones and Macs08:25 · Security Affairs · Known exploited CVE
    2. Apple Patches CoreGraphics Zero Day Exploited in Targeted iPhone Attacks09:01 · Infosecurity · Known exploited CVE
    3. Google Gemini Turns Find Hub Into a Memory Based Valuables Tracker09:01 · SecurityOnline · Known exploited CVE
  4. Thu 1 OctDay 32
    1. Apple PDF Flaw Gets PoC as CISA Warns of Targeted Exploitation07:31 · The Hacker News · Known exploited CVE
    2. Apple Patches CoreGraphics Zero Day Exploited in Targeted Attacks12:31 · Security Affairs · Known exploited CVE

  5. Quiet for 4 days

    Mon 5 OctDay 71
    1. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk04:06 · SecurityOnline · Picked up again · Known exploited CVE

  6. Quiet for 3 weeks

    Tue 27 OctDay 293
    1. Apple fixes 304 flaws, including one exploited in targeted attacks00:30 · SANS ISC · Picked up again · Known exploited CVE
    2. Apple backports exploited CoreGraphics flaw fix to older iPhones04:30 · SecurityOnline · Known exploited CVE
    3. Apple patches 286 flaws and backports fix for exploited bug13:40 · SecurityWeek · Known exploited CVE · This article, 16th of 16

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in