Apple Fixes CoreGraphics Flaw in Tahoe and Sequoia Updates

Apple’s September 28 macOS updates fix a CoreGraphics vulnerability that could let a maliciously crafted file run code. Mac users on macOS Tahoe should install version 26.7.1, while Sequoia users should install 15.8.1. Apple says it has a report that the flaw was used in a highly sophisticated attack against specific individuals running older iOS versions.The issue, tracked as CVE-2026-86950, is an out-of-bounds write. Apple fixed it with improved bounds checking. Apple’s Tahoe security advisory and its Sequoia advisory list the Mac updates as affected-product fixes and describe potential arbitrary code execution when processing a malicious file. The reported exploitation involved older iOS versions. Apple does not say attackers used the flaw against Macs.Apple released macOS 27.0.1 alongside the Tahoe and Sequoia updates. The CoreGraphics fix is specifically listed for Tahoe and Sequoia. Users can check for the update in System Settings under General, then Software Update.

Sooraj

Sooraj Raj is a programmer, blogger and professional developer with an interest in technology research and publishing. He writes about technology developments and shares information in a clear, straightforward way.