Critical Security Flaw in iOS 26, iPadOS 26, and macOS 26 Patched by Apple to Protect User Data

Fix for CVE-2026-86950 Vulnerability Implemented

According to НВ — Техно: Apple has addressed a serious security flaw, identified as CVE-2026-86950, present in the core graphics engine of iOS 26, iPadOS 26, and macOS 26. This vulnerability was exploited in targeted attacks against specific users on versions prior to iOS 27. The security researchers from Meta's product security team discovered this issue. Apple has not released technical details about the flaw, the number of affected devices, or the identity of those who exploited it.

Update Adoption Rates and the Importance of Upgrading

According to Apple's data, nearly 80% of iPhone owners are still running iOS 26. Notably, the newer releases-iOS 27, iPadOS 27, and macOS 27-do not contain this vulnerability, highlighting the critical need for users to update their devices. Earlier in September, Apple also resolved another significant zero-click vulnerability, CVE-2026-86869, which bypassed the BlastDoor security layer in iMessage and was fixed in iOS 27.

Addressing CVE-2026-86950 marks a vital advancement in safeguarding Apple users, especially given the large share still relying on outdated operating systems.

This situation underscores the necessity of regular software updates to defend against emerging threats. Users are strongly encouraged to upgrade to the latest OS versions to enhance the security of their devices and reduce exposure to potential attacks.

In a similar vein, Google has also taken significant steps to enhance user security by addressing a critical zero-click vulnerability, CVE-2026-58704, found in Pixel phones. This highlights the ongoing challenges tech companies face in protecting user data. For more details on Google's recent updates and the implications for device security, you can read the full story here.