US EditionApple patches decade-old iOS zero-day exploited in the wild
Apple fixed a critical zero-day vulnerability exploited in targeted attacks against politicians and activists, with a severity score of 9.8/10, affecting multiple Apple operating systems.
- Apple released patches alongside iOS 26.3 yesterday, fixing CVE-2026-20700 across iPhone, iPad, and other devices, after Google TAG reported the flaw.
- Apple reported the dyld flaw, affecting iOS since 1.0, and that Google Threat Analysis Group flagged it as used in an 'extremely sophisticated attack' against targeted individuals.
- Technical analysis shows the bug was chained with December WebKit flaws CVE-2025-14174 and CVE-2025-43529, and Tenable assigns CVE-2026-20700 a critical 9.8/10 severity.
- Apple urged high‑value users with sensitive access to install the update via Settings > General > Software Update, as the company did not disclose affected user numbers.
- Patching the decade‑old flaw alters the balance between attackers and defenders, closing a door open for over a decade and matching commercial surveillance firms' spyware sophistication, analysts said.
15 Articles
15 Articles
Apple discloses first actively exploited zero-day of 2026
Apple disclosed a zero-day vulnerability Wednesday that the vendor warned was previously “exploited in an extremely sophisticated attack against specific targeted individuals,” the company said in a security update. The memory-corruption vulnerability — CVE-2026-20700 — affects iPhones and iPads and was exploited on devices running versions of iOS before iOS 26. The Cybersecurity and Infrastructure Security Agency added the defect to its known e…
On Wednesday, Apple released patches for an already exploited zero-day vulnerability. Security researchers suspect commercial spyware behind the attacks. On Wednesday, the Cupertino Group rolled out extensive security updates for its operating systems. The focus is on solving a zero-day gap that has already been actively used for attacks, according to the company. The CVE-2026-20700 vulnerability allows for the inclusion and execution of malicio…
Coverage Details
Bias Distribution
- 80% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
