{"uuid": "547edb48-9e68-4159-9167-6153ac875648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86950", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3354", "content": "\ud83d\udd34 Apple Patches Zero-Day Linked to \u2018Extremely Sophisticated Attack\u2019 \n\nApple on Monday released iOS and macOS updates to patch a zero-day vulnerability that may have been exploited in targeted attacks.\n\nThe flaw, tracked as CVE-2026-86950, is an out-of-bounds write issue in the CoreGraphics component that can be exploited for arbitrary code execution when it processes a specially crafted file.\n\nApple has not said how the malicious file is delivered, but because CoreGraphics handles 2D graphics and PDF rendering across the operating system, it could arrive via web pages, email attachments, or messaging apps, where automatic attachment and link previews could enable zero-click exploitation.", "creation_timestamp": "2026-09-29T17:02:04.000000Z"}