Security2 hOctober 1, 2026, 12:54

Public PoC Released for Apple CoreGraphics CVE-2026-86950

Researchers published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in targeted attacks. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs.

The Hacker News

Open source

Public PoC released for CVE-2026-86950
Trigger is a PDF with a crafted embedded font
Flaw causes a crash, not code execution
Apple says it may have been used in targeted attacks

#Apple#CoreGraphics

Apple: zero-day CVE-2026-86950 exploited in targeted attacks

Security

CVE-2026-42167: ProFTPD mod_sql RCE and How to Analyze the Exploit-DB PoC

Security

Public PoC Exposes Critical Veeam Agent Privilege Escalation

Security

Public PoC Released for Apple CoreGraphics CVE-2026-86950

Apple: zero-day CVE-2026-86950 exploited in targeted attacks

CVE-2026-42167: ProFTPD mod_sql RCE and How to Analyze the Exploit-DB PoC

Public PoC Exposes Critical Veeam Agent Privilege Escalation

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)