VulnerabilitiesOct 26, 2026

Apple Patches for October 2026, (Mon, Oct 26th)

Apple releases patches for 304 vulnerabilities, including an actively exploited zero-day.

Vendor Watch

Run CoreGraphics?

Get an email when a reviewed story names CoreGraphics, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

Summary

Apple has issued patches for a significant number of vulnerabilities, totaling 304 in its latest update. Among these is CVE-2026-86950, a previously patched vulnerability in CoreGraphics that is now confirmed to have been actively exploited. This update addresses the issue across various Apple operating systems and products, including iOS, macOS, tvOS, watchOS, and Safari.

The lesson from this incident

Full lesson

Apple's October 2026 update addresses 304 vulnerabilities across its entire product ecosystem, including CVE-2026-86950, a CoreGraphics vulnerability that had been previously patched but is now confirmed as actively exploited in the wild. This highlights a dangerous pattern: threat actors routinely reverse-engineer patches to develop exploits, meaning any delay in applying updates creates a critical window of exposure. The breadth of affected platforms — iOS, macOS, tvOS, watchOS, and Safari — underscores how a single unpatched vulnerability can have cascading risk across an entire device fleet. Organizations and individuals who lag on applying Apple updates are directly exposed to confirmed, in-the-wild exploitation.

What helps against this

How we list vendors

Apple affected

Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
For exampleAxonius Exposures Holm Security Platform Rapid7 Exposure Command (InsightVM)all options
Automated patch management
Known holes get closed in days, not months.
For exampleManageEngine Patch Manager Plus NinjaOne Patch Management Qualys Patch Management all options
Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
For exampleNinjaOne Patch Management Microsoft Intune all options

Indicators of Compromise

cve — CVE-2026-86950
cve — CVE-2026-86990
cve — CVE-2026-28864
cve — CVE-2022-26704
cve — CVE-2026-112410
cve — CVE-2026-112413
cve — CVE-2026-112414
cve — CVE-2026-112415
cve — CVE-2026-112416
cve — CVE-2026-112417
cve — CVE-2026-112421
cve — CVE-2026-112423
cve — CVE-2026-112424
cve — CVE-2026-112425
cve — CVE-2026-112427
cve — CVE-2026-112428
cve — CVE-2026-112429
cve — CVE-2026-112430
cve — CVE-2026-112432
cve — CVE-2026-112434
cve — CVE-2026-112438
cve — CVE-2026-112441
cve — CVE-2026-112442
cve — CVE-2026-112443
cve — CVE-2026-112444
cve — CVE-2026-112446
cve — CVE-2026-112447
cve — CVE-2026-112449
cve — CVE-2026-112451
cve — CVE-2026-112453
cve — CVE-2026-112454

Entities

CoreGraphics (product)iOS (product)macOS (product)tvOS (product)watchOS (product)Safari (product)