Index
Search the public record. Drafts and scheduled notes are not included.
Apple patches an EXR zero-click bug, a macOS root flaw and iCloud mail spoofing
Three Apple issues, all fixed. CVE-2026-86869 is an ImageIO EXR flaw that ironPeak says is zero-click via iMessage (full code execution not shown). CVE-2026-43783 is a macOS root escalation. iCloud Mail had two sender spoofing bugs with no CVE.
Published 27h ago
