GoKawiilApple extends CoreGraphics zero-day fix to older iPhones and iPads
Apple has backported a security patch for CVE-2026-86950, a CoreGraphics out-of-bounds write flaw, to older devices including the iPhone XS, XR, and several iPad models. The vulnerability, originally patched last month for newer iOS, iPadOS and macOS versions, was discovered by Meta Product Security and has reportedly been exploited in a highly targeted attack against specific individuals on iOS versions before iOS 27.