Apple patches critical graphics engine bug in iOS 26

Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that may have been exploited by hackers to target specific individuals.

By ·

Sep 29, 2026

7 cards · 1m 50s · tap to begin

From · · · 1m 50s

Apple patches critical graphics engine bug in iOS 26

Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that may have been exploited by hackers to target specific individuals.

In brief

Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that may have been exploited by hackers to target specific individuals. Apple fixed a graphics engine vulnerability in iOS 26, iPadOS 26, and macOS 26 that could enable sophisticated attacks on targeted individuals, though details remain…

Apple fixes critical graphics bug

a person holding an iPhone facing the camera in a red backdrop

Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that the company says may have been exploited by hackers against targeted individuals.

Bug found in graphics engine

The vulnerability was found in the main graphics engine that powers the user interface and visuals on iPhones, iPads, and Macs. A successful exploit could allow hackers to steal personal data.

Meta discovered the flaw

Meta's product security team was credited with discovering the bug, officially classed as CVE-two zero two six hyphen eighty six thousand nine hundred fifty.

Apple and Meta stay silent

Apple and Meta stay silent

When reached by TechCrunch, spokespeople for Apple and Meta did not provide comment about how the bug was discovered or how many people had their devices hacked due to this vulnerability.

Millions still on older iOS

Almost four out of five iPhone owners are still running iOS 26, according to Apple's statistics. Devices running the latest version, iOS 27, released earlier this month, are unaffected by the bug.

Second critical bug also fixed

Apple recently fixed another critical security bug, CVE-two zero two six hyphen eighty six thousand eight hundred sixty nine, a zero-click vulnerability that could allow hackers to silently steal data via malicious iMessage.

Zero-click bug bypassed security

The zero-click bug could be invisibly triggered without user knowledge and was capable of bypassing BlastDoor, Apple's security feature designed to prevent malicious code from escaping iMessage's sandbox.

The main idea

Apple fixed a graphics engine vulnerability in iOS 26, iPadOS 26, and macOS 26 that could enable sophisticated attacks on targeted individuals, though details remain undisclosed.

Read the original on TechCrunch

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on apple and related topics.