Apple has patched a critical zero-day vulnerability, CVE-2026-20700, a memory corruption flaw in the dyld (Dynamic Link Editor) component affecting iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and visionOS. The issue, which could enable attackers with memory write capabilities to execute arbitrary code, was reportedly exploited in extremely sophisticated targeted attacks against specific individuals on older iOS versions before iOS 26. Discovered by Google's Threat Analysis Group and addressed in the February 2026 security updates (such as iOS 26.3), the flaw has also been added to CISA's Known Exploited Vulnerabilities catalog.