Still using an older iPhone? Apple releases security fix after targeted attacks

Dubai: Apple has issued a security patch for older iPhones and iPads to address a flaw that could have been exploited in targeted cyberattacks on specific users. The update, released on October 26, extends protection to devices still running iOS 18. Apple previously patched the same vulnerability for newer devices in September. The vulnerability, known as CVE-2026-86950, impacts CoreGraphics, a component of Apple's operating system responsible for handling visual content.

The flaw could enable attackers to execute malicious code by convincing a vulnerable device to process a specially crafted file. While Apple is unaware of any widespread exploitation, the company is aware of reports suggesting the vulnerability may have been used in a sophisticated attack against particular individuals using iOS versions prior to iOS 27.

Meta's Product Security team discovered the flaw. The update is available for the iPhone XS, iPhone XS Max, and iPhone XR, as well as the seventh-generation iPad. These older devices continue to receive security updates. Additionally, the new iOS 18.7.11 patch addresses two further privacy-related vulnerabilities. One could potentially expose sensitive data stored on a device, while another could allow a malicious app to access the camera without user consent.

Apple advises users to install the latest compatible software version for their device to mitigate these risks.