CVE-2026-86950: Apple Multiple Products
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.
- Vendor
- Apple
- Product
- Multiple Products
- Vulnerability
- Apple Multiple Products Out-of-Bounds Write Vulnerability
- Date added
- Sep 29, 2026
- CISA due date (U.S. federal agencies)
- Oct 2, 2026
- Known ransomware campaign use
- Unknown
- Weakness (CWE)
- CWE-787
References
- NVD — CVE-2026-86950
- support.apple.com
- support.apple.com
- support.apple.com
- www.cisa.gov
- www.cisa.gov
- nvd.nist.gov
This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.
Last updated: · Catalog version 2026.10.02