A public proof-of-concept (PoC) has emerged for CVE-2026-86950, an Apple CoreGraphics flaw that Apple stated may have been used in targeted attacks. The PoC demonstrates that a malicious PDF with a crafted embedded font can crash unpatched iPhones and Macs. While currently only causing a crash, researchers are working to turn this memory corruption into a working exploit. WhatsApp’s recent PDF checks suggest it might be a potential delivery vector for such exploits, raising concerns for Apple users.