FHN 
Apple has released iOS 18.7.11 and iPadOS 18.7.11 to address a serious security flaw that may have been used in targeted attacks. The update brings protection to older devices, including the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad.
The vulnerability, tracked as CVE-2026-86950, affects CoreGraphics, an Apple component responsible for handling graphics and documents. Apple says the issue may have been exploited against specific individuals using older versions of iOS.
How the CoreGraphics Vulnerability Works
The flaw is an out-of-bounds write, which happens when software places data outside its allocated memory area. An attacker could use a specially crafted file to trigger the problem and potentially execute code within an affected process.
Apple credits Meta Product Security with reporting the vulnerability. The company has fixed it by improving memory boundary checks.
Apple has not identified the attackers or explained how the malicious files reached the targeted devices. The advisory also does not confirm whether the attack required user interaction, so it should not be described as a confirmed zero-click exploit.
Two More Security Issues Also Fixed
The updates address additional problems affecting Apple devices:
- CVE-2026-65339: An issue in the Audio component could allow an application to expose sensitive user information.
- CVE-2026-86990: A CoreMedia vulnerability could allow a malicious app to access the camera without permission.
Apple improved security checks and access restrictions to address these issues. Unlike the CoreGraphics flaw, the advisory does not state that these two vulnerabilities were exploited in attacks.
The CoreGraphics fix is particularly important for older devices that may not receive the latest major iOS versions. Apple has previously issued security updates for legacy devices to address serious vulnerabilities.
How to Install the Update
Users with supported devices should install the update as soon as possible.
- Open Settings on your iPhone or iPad.
- Tap General, then Software Update.
- Download and install iOS 18.7.11 or iPadOS 18.7.11, if available.
Back up important data before updating and confirm the installed version afterward.
For further details, consult Apple’s official security update information.
Security takeaway: Older Apple devices can still face serious vulnerabilities. Keeping them updated helps reduce exposure to known attacks, even when they no longer receive major operating system upgrades
About the Author
