{"id":212636,"date":"2026-02-11T20:06:00","date_gmt":"2026-02-12T01:06:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/11\/apple-fixes-zero-day-flaw-used-in-extremely-sophisticated-attacks\/"},"modified":"2026-02-12T09:20:16","modified_gmt":"2026-02-12T14:20:16","slug":"apple-fixes-zero-day-flaw-used-in-extremely-sophisticated-attacks","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/11\/apple-fixes-zero-day-flaw-used-in-extremely-sophisticated-attacks\/","title":{"rendered":"Apple fixes zero-day flaw used in ‘extremely sophisticated’ attacks"},"content":{"rendered":"

Apple fixes zero-day flaw used in ‘extremely sophisticated’ attacks<\/a><\/p>\n

https:\/\/www.bleepingcomputer.com\/news\/security\/apple-fixes-zero-day-flaw-used-in-extremely-sophisticated-attacks\/<\/a><\/p>\n

Publish Date: 2026-02-11 20:06:00<\/a><\/p>\n

Source Domain: www.bleepingcomputer.com<\/a><\/p>\n

\n

Apple has released security updates to fix a zero-day vulnerability that was exploited in an “extremely sophisticated attack” targeting specific individuals.<\/p>\n

Tracked as CVE-2026-20700, the flaw is an arbitrary code execution vulnerability in dyld, the Dynamic Link Editor used by Apple operating systems, including iOS, iPadOS, macOS, tvOS, watchOS, and visionOS.<\/p>\n

Apple’s security bulletin warns that an attacker with memory write capability may be able to execute arbitrary code on affected devices.<\/p>\n

\"Wiz\"<\/p>\n

Apple says it is aware of reports that the flaw, along with the CVE-2025-14174 and CVE-2025-43529 flaws fixed in December, were exploited in the same incidents.<\/p>\n

“An attacker with memory write capability may be able to execute arbitrary code,” reads Apple’s security bulletin.<\/p>\n

“Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.”<\/p>\n

Apple says Google’s Threat Analysis Group discovered CVE-2026-20700. The company did not provide any further details about how the vulnerability was exploited.<\/p>\n

Affected devices include:<\/p>\n