Product

iOS & iPadOS

Made by Apple. 8 of its vulnerabilities are known to have been exploited.

Coverage

Severity: ElevatedAction: Be aware

Chrome Beta for iOS Update

Hi everyone! We've just released Chrome Beta 156 (156.0.8078.3) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…

Severity: ElevatedAction: Be aware

Chrome Stable for iOS Update

Hi everyone! We've just released Chrome Stable 155 (155.0.8059.24) for iOS; it'll become available on App Store in the next few hours. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…

Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV

Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

CISA added CVE-2026-86950 (Apple Multiple Products) to its Known Exploited Vulnerabilities catalog on September 29, 2026, which means there is reliable evidence of exploitation in the wild. Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

Why it matters

CISA lists this as exploited in the wild. Unpatched macOS and iOS & iPadOS systems are exposed to active attacks now.

Act now

Treat this as an emergency.

Severity: CriticalAction: Act nowExploitation: Exploited

Apple patches CoreGraphics zero-day flaw exploited in attacks

Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS devices.

Why it matters

Source reporting says attackers are already exploiting this, so exposed iOS & iPadOS systems are at immediate risk.

Act now

Treat this as an emergency.

Severity: ElevatedAction: Be aware

Chrome Beta for iOS Update

Hi everyone! We've just released Chrome Beta 155 (155.0.8059.16) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…

Severity: ElevatedAction: Be aware

Chrome Stable for iOS Update

Hi everyone! We've just released Chrome Stable 154 (154.0.8037.55) for iOS; it'll become available on App Store in the next few hours. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Coverage

    Chrome Beta for iOS Update

    Basis: Google Chrome Releases (vendor advisory)

  2. Coverage

    Chrome Stable for iOS Update

    Basis: Google Chrome Releases (vendor advisory)

  3. Coverage

    Mobile malware warning from Ukrainian researchers includes iPhone exploit kit

    Basis: Reporting by The Record by Recorded Future News

  4. Severity raisedUpdateKEV

    UPDATE: severity raised to critical: Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  5. AdvisoryKEV

    Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  6. Exploited

    Apple patches CoreGraphics zero-day flaw exploited in attacks

    Basis: Reporting by BleepingComputer

  7. Coverage

    Apple patches CoreGraphics zero-day flaw exploited in attacks

    Basis: Reporting by BleepingComputer

Actively exploited

Apple iOS

Apple iOS Type Confusion Vulnerability

Added Dec 14, 2022Fed. due Jan 4, 2023

Apple iOS

Apple iOS Webkit Memory Corruption Vulnerability

Added May 24, 2022Fed. due Jun 14, 2022

Apple iOS

Apple iOS Memory Corruption Vulnerability

Added May 24, 2022Fed. due Jun 14, 2022

Apple iOS

Apple iOS Information Disclosure Vulnerability

Added May 24, 2022Fed. due Jun 14, 2022

Apple iOS

Apple iOS Memory Corruption Vulnerability

Added May 23, 2022Fed. due Jun 13, 2022

Apple iOS

Apple iOS WebKit Buffer Overflow Vulnerability

Added Nov 3, 2021Fed. due Nov 17, 2021

Apple iOS

Apple iOS WebKit Memory Corruption Vulnerability

Added Nov 3, 2021Fed. due Nov 17, 2021

Apple iOS

Apple iOS WebKit Use-After-Free Vulnerability

Added Nov 3, 2021Fed. due Nov 17, 2021