Apple released updates for iOS, macOS, and other operating systems, addressing 286 vulnerabilities, including a critical zero-day flaw in CoreGraphics.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-86950 | 8.8 | HIGH | Yes, added 2026-09-29 | 2026-10-13 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw (2026-10-26)
- Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw (2026-10-26)
- CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws (2026-10-21)
- Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds (2026-10-19)
Business impact
Organizations may face operational disruptions and potential data breaches if these vulnerabilities are exploited. Legal and reputational risks are also heightened.
Industries affected
All industries are affected, as the vulnerabilities impact a wide range of Apple’s operating systems used in various sectors.
Users affected
Apple users, including individuals and businesses, are affected. The patches are critical to prevent potential attacks on their devices and systems.
