Apple released iOS 26.7.1 and iPadOS 26.7.1 on September 28 to fix CVE-2026-86950, an out-of-bounds write flaw in CoreGraphics that could enable arbitrary code execution through a maliciously crafted file. Apple said the vulnerability may have been exploited in highly advanced attacks against specific individuals using iOS versions before iOS 27, and credited Meta Product Security with identifying the issue. SlowMist said a successful device compromise could expose cryptocurrency wallet applications, authentication data, recovery information and other sensitive files, while stressing that no confirmed crypto theft has been directly tied to this flaw. Apple also issued a macOS Tahoe 26.7.1 fix for the same vulnerability. Apple shares fell 2.04% to $331.48 during Tuesday's session amid broader pressure on technology stocks as Treasury yields rose.