Apple Backports CoreGraphics Fix for Older iPhones and iPads After Exploit Reports

Apple has released security updates for older iPhones and iPads to patch a high-severity CoreGraphics vulnerability, tracked as CVE-2026-86950, that was exploited in real-world attacks. The flaw could allow arbitrary code execution via maliciously crafted files. The out-of-bounds write issue, with a CVSS score of 8.8, was initially fixed last month in iOS 26.7.1 and other systems, but the new iOS 18.7.11 and iPadOS 18.7.11 updates extend coverage to devices like iPhone XS and iPad 7th generation. Apple noted the exploit may have targeted specific individuals on iOS versions before iOS 27. The latest updates also address additional flaws, including an Audio logic issue that could leak user information and a CoreMedia access vulnerability allowing camera use without permission. Apple simultaneously shipped iOS 27.2 and other updates fixing hundreds of vulnerabilities, though no other flaws are confirmed as actively exploited.