Apple Fixes Possibly Exploited CoreGraphics Flaw on Older iPhones

Among the flurry of iOS 27.2 releases on Monday, Apple also pushed a wave of software updates for its older operating systems, including a fix for a CoreGraphics vulnerability that Apple says may have been exploited in targeted attacks.

The releases include iOS 26.7.2, iPadOS 26.7.2, iOS 18.7.11, iPadOS 18.7.11, macOS Tahoe 26.7.2, macOS Sequoia 15.8.2, and tvOS 26.6.1.

iOS 18.7.11 and iPadOS 18.7.11 bring the CoreGraphics fix to the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad, all of which cannot run iOS 26. According to Apple, processing a maliciously crafted file on these devices could lead to arbitrary code execution, and the company is "aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27."

For iOS 26.7.2 and iPadOS 26.7.2, Apple lists security fixes covering 134 vulnerabilities, none of which are flagged as having been exploited in the wild.

Apple likewise lists security fixes for macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2.

Lastly, tvOS 26.6.1: the only release of these updates with a user-facing change. The update adds support for the fourth-generation Siri Remote on the Apple TV HD and first-generation Apple TV 4K.

All of the updates are available now. On iPhone and iPad, go to Settings ➝ General ➝ Software Update. On Mac, go to System Settings ➝ General ➝ Software Update. On Apple TV, open up Settings and go to System ➝ Software Update.