Update older iPhones now: iOS 18.7.11 fixes an exploited flaw on iPhone XS and XR

Apple says a CoreGraphics bug that lets a booby-trapped file run code may have been used in targeted attacks. Newer iPhones got the fix in September; iPhone XS, XS Max and XR got it on October 26.

In this brief: 4 sections 2 min read

- iOS 18.7.11 covers iPhone XS, XS Max and XR, plus iPad 7th generation, iPad Air 4th generation and later, iPad 9th generation and later and iPad mini 6th generation and later that stay on iPadOS 18.
- CVE-2026-86950 is an out-of-bounds write in CoreGraphics. Apple says processing a maliciously crafted file may lead to arbitrary code execution, and that it may have been exploited against specific targeted individuals.
- iPhone 11 and later already got this fix in iOS 26.7.1 (September 28). On October 26 Apple also released iOS 27.2 and iOS 26.7.2 with roughly 160 other security fixes, none flagged as exploited.
- Open Settings, then General, then Software Update
- Install the update offered and restart
- Turn on Automatic Updates so future fixes install on their own

Read full analysis on support.apple.com

Useful?