APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1

mediumVulnerabilityimportance 42

AI summary · grok-4.7

Apple patched a CoreGraphics flaw in macOS Tahoe 26.7.1 that may allow code execution from a crafted file.

Apple Product Security published APPLE-SA-09-28-2026-2 for macOS Tahoe 26.7.1. The advisory describes a CoreGraphics flaw where processing a maliciously crafted file may lead to arbitrary code execution. Apple lists the release among recent software updates with security fixes. The excerpt includes no CVE identifier and does not say the bug is exploited.

APPLE-SA-09-28-2026-2 ships macOS Tahoe 26.7.1.
CoreGraphics may allow code execution from a crafted file.
The notice cites no CVE and no active exploitation.

Read the original

VendorsApple

ProductsmacOS Tahoe CoreGraphics

Tags#apple #macos #tahoe #coregraphics #code-execution #security-update

Full article

Posted by Apple Product Security via Fulldisclosure on Sep 28 APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 https://support.apple.com/149228. https://support.apple.com/100100 which lists recent software updates with security advisories. CoreGraphics Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to arbitrary code...

This source does not provide full text. Read it at seclists.org.

APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1

Apple Warns Users iOS Vulnerability Exploited in Attack (CVE-2026-86950)

Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

Apple patches CoreGraphics zero-day flaw exploited in attacks

APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1

APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

APPLE-SA-09-14-2026-4 macOS Tahoe 26.7

Apple security advisory (AV26-930)

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th)

APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1

APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’

Critical Apple Zero-Day Vulnerability Actively Exploited in Attacks

Apple Fixes iOS Zero-Day Exploited in Sophisticated Targeted Attacks

Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)

Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

Apple security advisory (AV26-971)

Still running iOS 26? Update your iPhones, iPads and Macs for this urgent security fix

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

Apple Warns Users iOS Vulnerability Exploited in Attack (CVE-2026-86950)

Apple patches CoreGraphics zero-day already exploited in targeted attacks