The company released iOS 18.7.11 and iPadOS 18.7.11 on Monday, Oct. 26, extending protection against a security flaw to older devices, including the iPhone XS, XS Max, and XR, according to Apple’s security advisory.
Apple says it is aware of a report that the flaw may have been exploited in an “extremely sophisticated attack” targeting specific individuals using versions of iOS before iOS 27.
That wording matters: The advisory describes a potentially targeted attack, rather than widespread exploitation affecting every iPhone owner.
The vulnerability, tracked as CVE-2026-86950, affects CoreGraphics, Apple’s graphics-processing software. Processing a maliciously crafted file could allow an attacker’s code to run on an affected device, Apple said.
The company addressed a memory-writing error by improving checks that keep data within its intended boundaries.
The fix itself is not brand-new. Apple’s earlier advisory lists the same vulnerability as patched in September through iOS 26.7.1 and iPadOS 26.7.1. Monday’s release brings the protection to an older software branch. 9to5Mac’s update roundup also lists the seventh-generation iPad among devices receiving the older-system update.
For users, the practical step is straightforward: Open Settings, select General, then Software Update, and install the latest version offered for the device.
Apple’s broader security guidance recommends keeping devices updated, using a passcode, and protecting an Apple Account with two-factor authentication. It also says the vast majority of users will never be targeted by mercenary spyware.
That general guidance does not establish who was behind this particular attack or identify any spyware involved.
For people facing exceptional targeting risks, Apple offers Lockdown Mode, which restricts certain apps, websites, and features to reduce potential avenues of attack.
It is additional protection, not a substitute for updating. Apple advises installing the latest software before enabling it to get the full set of protections.
Check back with Daily Voice for the latest updates.
Click here to follow Daily Voice and receive free news updates.
