Apple has issued an urgent warning to some iPhone users about a security vulnerability that may have been exploited in a “highly sophisticated attack,” according to technology reports.
اضافة اعلان
On October 26, the company released the iOS 18.7.11 update for the iPhone XS, iPhone XS Max and iPhone XR to address the vulnerability, which could allow attackers to execute malicious code on a device through a specially crafted file designed to exploit the security flaw.
Details of the security vulnerability
The vulnerability affects CoreGraphics, a component responsible for processing images and visual content and rendering them on Apple devices. It is tracked as CVE-2026-86950 and is associated with a flaw that allows data to be written outside its allocated memory space, potentially enabling the execution of malicious code.
Apple said the vulnerability “may have been exploited in a highly sophisticated attack targeting specific individuals” on versions of iOS earlier than iOS 27. The company said it addressed the issue by improving memory-boundary checks after receiving a report from Meta’s product security team.
The update also includes fixes for two additional vulnerabilities:
Camera access: One flaw could allow a malicious app to use the camera without the user’s permission.
Personal information exposure: The other could result in the leakage of sensitive data. Apple has not confirmed whether either of these vulnerabilities was exploited in actual attacks.
Separately, security researchers at Calif.io indicated that memory corruption could be triggered using a PDF file containing a font specially crafted to exploit the flaw. Their analysis raised the possibility of a connection to WhatsApp, but did not establish that the app was used in the actual attacks or explain how they were carried out.
Apple also released the iPadOS 18.7.11 update for the seventh-generation iPad.
How to install the update
Apple advises users of affected devices to install the latest update compatible with their devices as soon as possible by following these steps:
- Open Settings, then select General.
- Tap Software Update to check for available updates.
- Select Download and Install, then follow the on-screen instructions.
- Once installation is complete, verify that the new version has been installed.
It is advisable to back up data before updating, while keeping the phone connected to a charger and a Wi-Fi network.
The available version may vary depending on the iPhone model. Apple therefore recommends installing the latest compatible update displayed in the device’s settings rather than searching for a specific version.
Users can also enable automatic updates in the Software Update settings to ensure that future security fixes are installed when available.
