https://curasec.metacog.co.kr/tags/cve-2026-86950/Recent content in Cve-2026-86950 on CuraSecHugoen-usThu, 01 Oct 2026 17:21:52 +0000https://curasec.metacog.co.kr/insights/2026-10-01-apple-coregraphics-poc-emerges-as-whatsapp-pdf-checks-hint-a/Thu, 01 Oct 2026 17:21:52 +0000https://curasec.metacog.co.kr/insights/2026-10-01-apple-coregraphics-poc-emerges-as-whatsapp-pdf-checks-hint-a/<ul> <li><strong>Engineer — Act:</strong> CISA KEV-listed and crash-level public PoC confirms exploitation is real; patch all macOS and iOS endpoints to Apple&rsquo;s latest security release immediately, prioritizing internet-facing and executive devices.</li> <li><strong>SOC/IR — Act:</strong> KEV listing confirms in-the-wild exploitation via crafted PDF; hunt for anomalous CoreGraphics crashes and WhatsApp-delivered PDF activity in EDR telemetry since the KEV add date, and tune detections for malicious font-embedded PDFs.</li> <li><strong>Leader — Act:</strong> A CISA KEV-listed Apple vulnerability with a confirmed targeted-use pattern means executive iPhones and Macs are at risk; verify MDM fleet patch compliance and assess whether any high-value personnel may have been targeted before the patch was available.</li> <li><strong>Signals:</strong> CVE-2026-86950 — CISA KEV: listed, EPSS 0.01, public PoC on GitHub</li> </ul>