Mmastodon TechnologyCybersecurity first seen 9 h ago, last 9 h ago, peak #9

Public PoC Released for Apple CoreGraphics Flaw

Original: 🤖 CVE-2026-86950 (Apple CoreGraphics): first public PoC published. A malicious PDF with a crafted embedded font crashes

A first public proof-of-concept is now available for CVE-2026-86950, a vulnerability in Apple's CoreGraphics. A malicious PDF with a crafted embedded font crashes unpatched iPhones and Macs, though no working exploit has been demonstrated. Apple patched the flaw on September 28 after targeted attacks, and CISA set an October 2 fix deadline for federal agencies under its Known Exploited Vulnerabilities catalog.

Why now: The release of a public PoC shortly after the patch deadline raises concern that more attackers may now weaponise the flaw.

AppleCoreGraphicsCISACVE-2026-86950

Open on mastodon →

Evidence

• 🤖 CVE-2026-86950 (Apple CoreGraphics): first public PoC published. A malicious PDF with a crafted embedded font crashes unpatched iPhones/Macs — crash only, no working exploit demonstrated. Apple patched Sep 28 after targeted attacks; CISA KEV fix deadline Oct 2. 🔗 https://… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/599256