A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution

A vulnerability has been discovered in Apple products that could allow for arbitrary code execution.

Successful exploitation of the vulnerability could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

A vulnerability has been discovered in Apple products that could allow for arbitrary code execution. Details of the vulnerability are below:

Tactic:Initial Access(TA0001):

Technique:Drive-by Compromise(T1189):

Successful exploitation of the vulnerability could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®