Apple's High-Risk Zero-Day Vulnerability Exposed: WhatsApp File Reception Can Attack iPhones Without User Interaction
- Published:
- First detected:
Insights by Echo AI
On September 30, cybersecurity research institute Califf published a report revealing a high-risk zero-day vulnerability (CVE-2026-86950) in Apple's system. Apple released an emergency iOS 26.7.1 update to fix this issue, reported by Meta's security team. Attackers can embed malicious PDF files with specially crafted fonts via WhatsApp, triggering the attack upon file reception. The vulnerability lies in Apple's CoreGraphics graphics rendering engine, causing an integer underflow error. Meta reinforced WhatsApp's security, and Apple fixed the underlying unit conversion logic. Officials urge Apple users to upgrade immediately.
Source coverage
17
records merged
0
0 unique
17
4 unique
0
0 unique
17 Sources
Unlock Echo Intelligence
Move beyond the public feed. Monitor breaking stories across Telegram, X, and the web — with earlier visibility, clearer context, and complete control over your sources.
- Monitor Telegram, X, and web in one place
- Add any source, from niche channels to global outlets
- Build custom feeds around events, regions, entities, or keywords
- Merge duplicate coverage into one clear, source-transparent story
- Auto-translate summaries and full articles
- Search past coverage and use AI-powered editorial tools
