Apple has released a coordinated set of security updates to address an actively exploited zero-day vulnerability affecting dyld, the Dynamic Link Editor foundational to iOS, iPadOS, macOS, tvOS, watchOS, and visionOS. The flaw, tracked as CVE-2026-20700, is characterized as a memory corruption issue enabling arbitrary code execution, and could allow attackers with memory write capability to compromise vulnerable devices. Apple acknowledged reports that the vulnerability was leveraged in “extremely sophisticated” attacks targeting specific individuals on versions of iOS prior to iOS 26, and noted that two (2) previously remediated flaws from December 2025 (CVE-2025-14174, an out-of-bounds memory access in ANGLE’s Metal renderer, and CVE-2025-43529, a WebKit use-after-free vulnerability triggered by malicious web content) were exploited in the same incidents, indicating the possible use of a vulnerability chain. The zero-day was discovered and reported by Google’s Threat Analysis Group, though technical details surrounding exploitation have not been disclosed. Patches have been released for a wide range of devices, including iPhone 11 and later, multiple iPad models, Macs running macOS Tahoe, Apple TV, Apple Watch Series 6 and newer, and Apple Vision Pro, with additional updates provided for older operating systems and Safari. CTIX analysts strongly urge users to install the latest updates to reduce exposure. The disclosure represents Apple’s first in-the-wild zero-day addressed in 2026 and underscores the continued targeting of Apple platforms by advanced threat actors conducting precision surveillance or intrusion campaigns.