Apple Releases Emergency Patch for Zero-Click iOS Vulnerability

Apple has issued emergency updates for iOS 26.7.1, iPadOS 26.7.1, and macOS to address a zero-click vulnerability, CVE-2026-86950, in CoreGraphics. The flaw allows arbitrary code execution through the processing of malicious files without user interaction. Reported by Meta's security team, the vulnerability may have been exploited in targeted attacks. The Cybersecurity and Infrastructure Security Agency has mandated that federal agencies apply the patch within three days.