Apple released security updates to fix a zero-day in CoreGraphics that was reportedly used in extremely sophisticated attacks against targeted iOS users. The flaw, tracked as CVE-2026-20700, affects a wide range of Apple devices and was patched with improved bounds checking in iOS, iPadOS, and macOS. #Apple #CoreGraphics #CVE-2026-20700
Keypoints
- Apple patched a zero-day in CoreGraphics exploited in targeted attacks.
- The flaw is tracked as CVE-2026-20700 and involves an out-of-bounds write.
- Maliciously crafted files could trigger arbitrary code execution.
- The issue affects many iPhone, iPad, and Mac models.
- Apple recommends installing iOS, iPadOS, and macOS updates immediately.