Mobile & Vulnerability Management5 October 2026
CISA adds Apple out-of-bounds write CVE-2026-86950 to KEV
CISA has added an Apple out-of-bounds write flaw, CVE-2026-86950, to its Known Exploited Vulnerabilities catalog on evidence of active exploitation. The alert covers multiple Apple products, so mobile and endpoint teams should check their own exposure now.
cve-2026-86950applecisa-kev
3 min readRead
Vulnerabilities & Mobile Security1 October 2026
Apple patches CoreGraphics zero-day CVE-2026-86950 exploited in targeted attacks
Apple has fixed an out-of-bounds write in Core Graphics that could give code execution from a malicious file. Apple says it may have been used in an "extremely sophisticated attack" on specific individuals, and CISA has added it to KEV.
applezero-daycve-2026-86950
3 min readRead