Have an older iPhone or iPad? Apple has a security update for you

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Tahle CVE jsem vytáhl z širšího textu článku: CVE-2025-20701, CVE-2026-20700. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 9

1. 29. 10. 2026 12:03 · Malwarebytes Labs US nadpis události

   Have an older iPhone or iPad? Apple has a security update for you

   Apple’s latest updates include a fix for a CoreGraphics bug that may have been exploited in targeted attacks. The fix is now available for older iPhones and iPads. Apple released security updates on October 26. Apple first fixed the flaw in iOS 26.7.1. Its latest updates also bring the fix to older devices that can’t run iOS 26, including the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad. The iOS 18.7.11 update is a backport: it brings a fix from a newer software version to…

2. 27. 10. 2026 11:36 · BleepingComputer US

   Apple backports CoreGraphics zero-day patches to older iPhones

   ​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]

3. 27. 10. 2026 · zachyceno 17:00 · CERT-FR – avis FR

   Multiples vulnérabilités dans les produits Apple (27 octobre 2026)

   De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données. Apple indique que la vulnérabilité CVE-2026-86950...

4. 29. 9. 2026 14:30 · Cyber Centre Kanada CA

   Apple security advisory (AV26-971)

   Serial number: AV26-971Date: September 29, 2026 As of September 28, 2026, Apple is affected by a vulnerability in the following products: iOS and iPadOS Prior to 27.0.1 Prior to 26.7.1 macOS Golden Gate Prior to 27.0.1 macOS Tahoe Prior to 26.7.1 macOS Sequoia Prior to 15.8.1 watchOS Prior to 27.0.1 visionOS 27 Prior to 27.0.1 Apple has indicated that CVE-2026-86950 may have been exploited. On September 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-86950 to…

5. 29. 9. 2026 12:35 · Malwarebytes Labs US

   Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

   Apple has released updates for iPhones, iPads, and Macs to fix a flaw that could let an attacker run code when a device processes a malicious file. Apple says it may have been used in highly targeted attacks against iPhone users running versions of iOS before iOS 27. The fix is in iOS and iPadOS 26.7.1, as well as macOS Sequoia 15.8.1 and macOS Tahoe 26.7.1. Check Software Update on each of your Apple devices and install the latest version offered. Updates for your particular device The table…

6. 29. 9. 2026 09:56 · CSIRT Itálie (ACN) IT

   Apple: rilevato sfruttamento in rete della CVE-2026-86950

   Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2026-86950 – già sanata dal vendor - che interessa i prodotti Apple iOS, iPadOS, macOS Tahoe e macOS Sequoia. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato l'esecuzione di codice arbitrario sui sistemi interessati.

7. 29. 9. 2026 · zachyceno 16:30 · CISA KEV US

   Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950)

   CISA added CVE-2026-86950 to the Known Exploited Vulnerabilities catalog. Affected product: Apple Multiple Products. Remediation due date: 2026-10-02.

8. 29. 9. 2026 · zachyceno 15:00 · CERT-FR – avis FR

   Vulnérabilité dans les produits Apple (29 septembre 2026)

   Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance. Apple indique que la vulnérabilité CVE-2026-86950 est activement exploitée.

9. 29. 9. 2026 00:04 · SANS Internet Storm Ctr. US

   Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th)

   Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27 are not affected. Today's update for the current "27" branch does not address security issues, but fixes some functional issues that got caught after the release two weeks ago. A 27.1 version was also expected to support the new foldable iPhone and will…