The update fixes a CoreGraphics vulnerability that could allow arbitrary code execution, alongside two other security issues, on older iPhones and iPads.
Apple has issued iOS 18.7.11 and iPadOS 18.7.11 to close a security flaw that the company says may already have been used in targeted attacks. The update is intended not only for newer devices, but also for older iPhones and iPads that no longer receive the latest major software versions. According to Apple’s security advisory, the patch addresses a vulnerability in CoreGraphics, the component used to process graphical content, where a maliciously crafted file could trigger an out-of-bounds write and potentially lead to arbitrary code execution.
The issue, tracked as CVE-2026-86950, was reported by Meta Product Security. Apple said it is aware of reports that the flaw may have been exploited in a highly sophisticated attack against specific individuals before a fix was available. That wording points to a zero-day vulnerability, meaning the weakness was known to attackers before Apple had released a remedy. The company did not indicate any broad consumer campaign, but the fact that it has publicly acknowledged possible exploitation raises the urgency for users who remain on the affected software branch.
Apple’s advisory also lists two further security fixes in the same release. One affects Audio and could have allowed sensitive information to be exposed, while the other involves CoreMedia and could have permitted unauthorised camera access in some circumstances. Apple says it strengthened checks and restrictions to address both problems. The release date recorded by Apple for iOS 18.7.11 is 26 October 2026, underscoring that this is a current security maintenance update rather than a legacy patch issued out of sequence.
The affected devices include the iPhone XS, XS Max and XR, as well as the seventh- and ninth-generation iPad, the fourth-generation iPad Air and later, and the sixth-generation iPad mini. Apple says users can install the update through Settings, then General, then Software Update. The company also recommends making a backup before installation and ensuring the battery is sufficiently charged and the device is connected to a stable internet link.
Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.
