Index
Search
Search the public record. Drafts and scheduled notes are not included.
High
research
Apple patches an EXR zero-click bug, a macOS root flaw and iCloud mail spoofing
Three Apple issues, all fixed. CVE-2026-86869 is an ImageIO EXR flaw that ironPeak says is zero-click via iMessage (full code execution not shown). CVE-2026-43783 is a macOS root escalation. iCloud Mail had two sender spoofing bugs with no CVE.
Published 27h ago
MediumNo PoC
CVE-2026-86869
Apple ImageIO EXR out-of-bounds write (zero-click claim by researcher)
Other
Published 14 Sept 2026