CVE-2026-86950

Apple's CoreGraphics out-of-bounds write vulnerability in iOS, macOS, and iPadOS allows arbitrary code execution and is actively exploited in the wild.

An out-of-bounds write flaw in Apple's CoreGraphics library across iOS, macOS, and iPadOS enables attackers to execute arbitrary code on affected devices. This is a critical failure for DIB organizations relying on Apple hardware, as it directly violates the requirement to patch known vulnerabilities and exposes systems to remote compromise. Organizations must ensure all Apple devices are updated to the latest patches immediately and monitor for exploitation attempts.

Shame score — A critical out-of-bounds write vulnerability in a core system library was actively exploited in the wild, indicating a failure to patch known issues and a severe breach of the duty to protect systems.