Apple has recently extended its security coverage by releasing updates for older iPhones and iPads, addressing a significant vulnerability that has been actively exploited. This move highlights Apple’s commitment to user security even for devices not running the latest operating systems.
Addressing the CoreGraphics Vulnerability
The critical flaw, identified as CVE-2026-86950, scored a high severity rating of 8.8 on the CVSS scale. It involves an out-of-bounds write issue within CoreGraphics, which can lead to arbitrary code execution when a malicious file is processed. Initially patched in newer software versions last month, Apple has now included these fixes in older systems.
Previously, Apple released patches for iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1, acknowledging potential exploitation in targeted attacks. These updates are now extended to iOS 18.7.11 and iPadOS 18.7.11, ensuring devices like the iPhone XS series and several iPad generations are protected.
Additional Security Enhancements
Alongside the CoreGraphics fix, the updates for iOS 18.7.11 and iPadOS 18.7.11 address other vulnerabilities. A logic issue in Audio (CVE-2026-65339) that could leak sensitive information and an access vulnerability in CoreMedia (CVE-2026-86990) that could allow unauthorized camera access have also been resolved.
These updates are part of a broader security enhancement effort as Apple rolls out iOS 27.2 and other platform versions, addressing numerous vulnerabilities across AppleAVD, CoreAudio, and WebKit, among others.
Importance of Updating Devices
Despite the absence of evidence indicating widespread exploitation of these vulnerabilities, Apple emphasizes the importance of maintaining updated devices. Ensuring the latest updates are installed is crucial for optimal device security and performance.
Apple’s decision to backport these fixes underscores its proactive approach in safeguarding users against emerging cyber threats, particularly for those utilizing older devices.
In conclusion, users are encouraged to update their devices promptly to benefit from these critical security enhancements.
