thehackernews.com
Oct 27, 2026
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
AI-summarised brief · reviewed before publication
Apple released backported security patches for the high‑severity CoreGraphics flaw (CVE‑2026‑86950, CVSS 8.8) to older iPhones and iPads. The out‑of‑bounds write could allow arbitrary code execution via malicious files. Patches now cover iOS 18.7.11 and iPadOS 18.7.11, supporting devices from iPhone XS to iPad mini 6th generation and newer. The update also fixes an Audio logic issue (CVE‑2026‑65339) and a CoreMedia camera‑access vulnerability (CVE‑2026‑86990). Apple noted the flaw may have been exploited in sophisticated attacks against specific individuals on pre‑iOS‑27 devices.
💡 Why It Matters
- · By extending protection to legacy hardware, Apple reduces the attack surface for targeted exploits that previously left older users vulnerable.
- · The move underscores the importance of timely updates for devices that remain in active use.
