CyberSecurity News

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

The Hacker News

· October 27, 2026

AI summary

Apple has released a fix for a high-severity security flaw that was being exploited in real-world cyber attacks, making it available to older iPhone and iPad models. The flaw is an out-of-bounds write issue in CoreGraphics that could allow arbitrary code execution when a malicious file is processed. This vulnerability has a CVSS score of 8.8 and is identified as CVE-2026-86950. Apple initially released patches for this flaw last month. The backported fix extends protection to older devices that would not have received the initial patch.

Vulnerabilities mentioned

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

Read the full article at The Hacker Newsthehackernews.com/2026/10/apple-backports-fix-for-exploited.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.