Apple CoreGraphics fixes across macOS and iOS

Apple released security advisories for macOS and iOS addressing an out-of-bounds write in CoreGraphics. The issue is described as exploitable and possibly used in targeted attacks.

macOS Sequoia 15.8.1 CoreGraphics fix

Apple posted the APPLE-SA-09-28-2026-3 advisory for macOS Sequoia 15.8.1. The update fixes an exploitable out-of-bounds write in CoreGraphics. Platform security watchers should track this as a concrete remediation for a write vulnerability that can be leveraged.

macOS Tahoe 26.7.1 addresses same CoreGraphics flaw

Apple issued the APPLE-SA-09-28-2026-2 advisory covering macOS Tahoe 26.7.1. It fixes the CoreGraphics out-of-bounds write and notes prior targeted exploitation on iOS. Users of this release gain a direct patch against a flaw already tied to real-world targeting.

iOS 26.7.1 and iPadOS 26.7.1 CoreGraphics update

Apple published APPLE-SA-09-28-2026-1 for iOS 26.7.1 and iPadOS 26.7.1. The update fixes one CoreGraphics out-of-bounds write noted as possibly exploited in targeted attacks. Mobile security and development teams have reason to apply it promptly given the exploitation context.