Have an older iPhone or iPad? Apple has a security update for you
Apple has issued a security update for older iPhones and iPads, fixing a CoreGraphics bug that may have been exploited in targeted attacks.
Apple's latest security updates address a critical vulnerability in its CoreGraphics framework, which may have been used in sophisticated attacks against specific individuals. The fix has been backported to older devices that cannot support the newest iOS version, including the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad.
The iOS 18.7.11 update represents a significant move by Apple to ensure legacy devices remain protected. The company first patched the flaw in iOS 26.7.1 but recognized that not all users could upgrade to the latest operating system.
Critical Vulnerability Details
The security flaw, identified as CVE-2026-86950, is an out-of-bounds write vulnerability in CoreGraphics—Apple's framework for handling graphics, images, and PDF content. This type of flaw could allow attackers to execute arbitrary code by processing maliciously crafted files.
The language used by Apple suggests the bug was actively used in real-world attacks against a limited group of users, typically journalists, activists, and officials who might be targets of advanced spyware.
How to Update Your Devices
For iPhone and iPad users, navigate to Settings > General > Software Update to check for and install the latest patch. Users should also ensure Automatic Updates are enabled for ongoing protection. Mac users can update through the Apple menu > System Settings > General > Software Update.
Safari browser updates are included with macOS updates, though users can check for separate Safari updates in the same Software Update section. All devices should be kept plugged in and connected to the internet until the update completes.
Apple recommends that potential targets of sophisticated attacks update their devices, restart them, and consider enabling Lockdown Mode for additional protection. The company emphasizes the importance of prompt patching to prevent exploitation of this vulnerability.
Related
