From TechCrunch · Zack Whittaker · · 1m 50s
Apple patches critical graphics engine bug in iOS 26
Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that may have been exploited by hackers to target specific individuals.
In brief
Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that may have been exploited by hackers to target specific individuals. Apple fixed a graphics engine vulnerability in iOS 26, iPadOS 26, and macOS 26 that could enable sophisticated attacks on targeted individuals, though details remain…
Apple fixes critical graphics bug

Apple has fixed a security vulnerability in iOS 26, iPadOS 26, and macOS 26 that the company says may have been exploited by hackers against targeted individuals.
Bug found in graphics engine
The vulnerability was found in the main graphics engine that powers the user interface and visuals on iPhones, iPads, and Macs. A successful exploit could allow hackers to steal personal data.
Meta discovered the flaw
Meta's product security team was credited with discovering the bug, officially classed as CVE-two zero two six hyphen eighty six thousand nine hundred fifty.
Apple and Meta stay silent

When reached by TechCrunch, spokespeople for Apple and Meta did not provide comment about how the bug was discovered or how many people had their devices hacked due to this vulnerability.
Millions still on older iOS
Almost four out of five iPhone owners are still running iOS 26, according to Apple's statistics. Devices running the latest version, iOS 27, released earlier this month, are unaffected by the bug.
Second critical bug also fixed
Apple recently fixed another critical security bug, CVE-two zero two six hyphen eighty six thousand eight hundred sixty nine, a zero-click vulnerability that could allow hackers to silently steal data via malicious iMessage.
Zero-click bug bypassed security
The zero-click bug could be invisibly triggered without user knowledge and was capable of bypassing BlastDoor, Apple's security feature designed to prevent malicious code from escaping iMessage's sandbox.
The main idea
Apple fixed a graphics engine vulnerability in iOS 26, iPadOS 26, and macOS 26 that could enable sophisticated attacks on targeted individuals, though details remain undisclosed.
