Ethical Hacking News
Apple has backported a security fix for a high-severity CoreGraphics vulnerability, which was exploited in real-world cyber attacks, to older iPhones and iPads, including devices running iOS 18.7.11 and iPadOS 18.7.11.
Apple has backported a security fix for a high-severity vulnerability in its CoreGraphics library, CVE-2026-86950, to older devices. The initial patches were released for iOS 26.7.1 and later, but have now been expanded to include iOS 18.7.11 and iPadOS 18.7.11. The update addresses a logic issue in Audio and an access vulnerability in CoreMedia, in addition to hundreds of other vulnerabilities. Apple's efforts to improve the security of its operating systems and devices are ongoing, with the latest update being a significant step in that direction. Users are encouraged to update their devices to the latest version for optimal protection against cyber threats. The update includes several other features and improvements, including support for new hardware and software features.
Apple has recently backported a security fix for a high-severity vulnerability in its CoreGraphics library, which was exploited in real-world cyber attacks on older devices. The vulnerability, tracked as CVE-2026-86950, has a CVSS score of 8.8 and can result in arbitrary code execution when processing a maliciously crafted file.
The initial patches for the flaw were released last month in versions iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1, acknowledging that it may have been exploited in sophisticated attacks against specific individuals using devices running iOS before iOS 27. However, in a recent update, Apple has expanded the fix to include iOS 18.7.11 and iPadOS 18.7.11, which support a range of older devices, including the iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later.
The update also addresses a logic issue in Audio (CVE-2026-65339) that could be exploited by an app to leak sensitive user information and an access vulnerability in CoreMedia (CVE-2026-86990) that could be abused by a malicious app to access the camera without user permission. Furthermore, the update includes patches for hundreds of vulnerabilities, including many in AppleAVD, CoreAudio, ImageIO, kernel, Model I/O, Screen Sharing Server, Spotlight, StorageKit, and WebKit.
The release of these patches comes as part of a larger effort by Apple to improve the security of its operating systems and devices. The company has been actively working to address vulnerabilities and improve the overall security posture of its products, and this latest update is a significant step in that direction.
While Apple has not explicitly stated that the issue has been exploited in the wild, it is always a good practice for users to update their devices to the latest version for optimal protection. The latest version of iOS and iPadOS include a range of security features and patches that can help protect against cyber threats.
In recent months, there have been several high-profile attacks on older devices, highlighting the importance of keeping devices and operating systems up to date. The fact that Apple has backported the security fix to older devices, including those running iOS 18.7.11 and iPadOS 18.7.11, demonstrates the company's commitment to protecting its users and its devices from cyber threats.
In addition to the security patches, the update also includes several other features and improvements, including support for new hardware and software features. The update is available now, and users are encouraged to download and install it as soon as possible to ensure the best possible security and performance.
Overall, the backporting of the security fix for the exploited CoreGraphics flaw is a significant step forward for Apple and its users. By providing a range of security patches and features, Apple is demonstrating its commitment to protecting its users and its devices from cyber threats. Users are encouraged to take advantage of this update to ensure their devices are as secure as possible.
Related Information:
https://www.ethicalhackingnews.com/articles/Exploited-CoreGraphics-Flaw-Apple-Backports-Security-Patch-to-Older-iPhones-and-iPads-ehn.shtml
https://thehackernews.com/2026/10/apple-backports-fix-for-exploited.html
https://nvd.nist.gov/vuln/detail/CVE-2026-86950
https://www.cvedetails.com/cve/CVE-2026-86950/
https://nvd.nist.gov/vuln/detail/CVE-2026-65339
https://www.cvedetails.com/cve/CVE-2026-65339/
https://nvd.nist.gov/vuln/detail/CVE-2026-86990
https://www.cvedetails.com/cve/CVE-2026-86990/
Published: Tue Oct 27 13:08:01 2026 by llama3.2 3B Q4_K_M
