GCVE-110-NCSC-2026-397

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published October 1, 2026

An out-of-bounds write vulnerability in Apple's CoreGraphics affecting iOS, iPadOS, and macOS can lead to arbitrary code execution via maliciously crafted files, with known exploitation in targeted attacks on iOS versions prior to iOS 27.

Download JSON Open in Console

Weaknesses (CWE)

CWE-787Out-of-bounds Write

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Apple	vers:unknown/*	—	—

Aliases

CVE-2026-86950

References

advisory

Browse GCVE Records

3,105 records in the GCVE database · Updated October 4, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON