iOS 26.7.1 Fixes Vulnerability Used in Targeted Attacks
iOS 26.7.1 , iPadOS 26.7.1, macOS Tahoe 26.7.1 , and macOS Sequoia 15.8.1 address a major vulnerability that Apple believes was used against a small number of people. Apple's security support pages say there was a CoreGraphics out-of-bounds write issue that could be exploited with a maliciously crafted file, allowing for arbitrary code execution. It has been fixed with improved bounds checking.…
The latest iOS updates, 26.7.1, 26.7.1 for iPadOS, and 26.7.1 for macOS Tahoe and Sequoia, patch a significant security flaw that security experts believe was leveraged in targeted cyberattacks against a limited number of users. Apple's security guidance states the issue stemmed from a CoreGraphics vulnerability that could be exploited via a specially crafted file, enabling unauthorized code execution.
The flaw was reportedly exploited in an intricate attack targeting specific individuals using outdated iOS versions. Apple's recent operating system updates, 27.0.1 for iPadOS, 27.0.1 for iOS, and 27.0.1 for macOS, have not been reported to contain this particular vulnerability. The attack, though not widespread, poses a risk if users remain on iOS 26, iPadOS 26, macOS Tahoe, or macOS Sequoia, as the flaw is now publicly known and could be exploited against unprotected users.
MacRumors.com highlights the importance of promptly installing the new updates to mitigate the risk.
Written by urgent.news from MacRumors's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.