Apple patches CoreGraphics zero-day used in 'extremely sophisticated' targeted attacks on iOS devices

https://cdn.mos.cms.futurecdn.net/4bhmWz85fUwn539BDDXxeF-1110-80.jpg
  • Apple patches high-severity CoreGraphics zero-day reportedly exploited against specific targeted individuals
  • The vulnerability enables arbitrary code execution through maliciously crafted files on affected Apple devices
  • Apple urged users to install the latest security updates, particularly high-value targets facing sophisticated attacks

Apple has released a fix for a zero-day vulnerability it says was allegedly used “in an extremely sophisticated attack against specific targeted individuals”.

The vulnerability was found in iOS 26.7.1 and iPadOS 26.7.1 and users are advised to apply the fix as soon as possible. This is particularly important for high-value targets such as diplomats, dissidents, whistleblowers, political opposition, and journalists.

Zero-day

The vulnerability was found in CoreGraphics, the company’s low-level 2D graphics framework used across different platforms (iOS, iPadOS, macOS, and more). CoreGraphics provides developers with tools they need to draw and render visual elements (lines, shapes, images, and even text), and can handle operations such as colors, transparency,...

Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE

Read more