Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
Double-free crash in macOS from a remote attacker
A double-free flaw in macOS was fixed with improved memory management. A remote attacker can trigger it and cause an unexpected process termination. Apple lists the issue as fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2; earlier builds are not enumerated.
What to do: Update to macOS Golden Gate 27.2, macOS Sequoia 15.8.2, or macOS Tahoe 26.7.2, matching the installed release.
| Product | Affected | Fixed in |
|---|---|---|
| Apple macOS Golden Gate | — | 27.2 |
| Apple macOS Sequoia | — | 15.8.2 |
| Apple macOS Tahoe | — | 26.7.2 |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination.
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
Today 625 readers · 755 views · 574 reads · all time 158K views