Apple has unveiled critical updates for its iPhone, iPad, and Mac devices, addressing a vulnerability that could potentially allow an attacker to execute arbitrary code via the processing of a malicious file. This flaw is reportedly linked to highly targeted assaults on users with iOS versions preceding iOS 27.
The resolutions are incorporated in iOS and iPadOS versions 26.7.1, alongside macOS Sequoia 15.8.1 and macOS Tahoe 26.7.1. Users are advised to navigate to Software Update on their respective Apple devices to install the latest available versions.
Specific Updates for Your Device
The table below delineates the pertinent updates available, along with links to Apple’s security overview for each one.
Instructions for Updating Apple Devices
Updating Your iPhone or iPad
To ascertain whether you are utilizing the latest software version, proceed to Settings > General > Software Update. This will indicate if an update is pending, guiding you through the installation process.
Activate Automatic Updates if you have not yet done so—this option is located on the same interface. Available update options on iPad
Updating macOS on Any Version
To update macOS on any supported Mac, employ the following steps through Software Update:
- Select the Apple menu found in the upper-left corner of your screen.
- Opt for System Settings (or System Preferences on earlier iterations).
- Choose General from the sidebar, then click Software Update on the right. For older macOS versions, you may find Software Update directly.
- Your Mac will automatically check for available updates. If updates are found, click Update Now (or Upgrade Now for significant new releases) and adhere to the on-screen directives. Before proceeding with an upgrade to macOS Tahoe 26, please review Apple’s guidelines.
- Input your administrator password if prompted, and allow your Mac to complete the update process, which may require a restart.
- Ensure that your Mac remains plugged in and connected to the internet until the update is finalized.
Technical Insights
The vulnerability identified as CVE-2026-86950 pertains to CoreGraphics, an Apple framework integral to displaying and processing visual content such as images and PDFs across its operating systems and applications.
This issue is characterized as an out-of-bounds write error, which Apple has remedied through enhanced bounds checking.
Such vulnerabilities occur when software attempts to write data beyond its allocated memory limits, potentially corrupting other data, disrupting program operations, causing crashes, or permitting an attacker to commandeer the affected process.
In this instance, processing a specifically crafted malicious file could facilitate an attacker in executing their own code.
Apple has acknowledged reports indicating that this flaw may have been weaponized in an “exceedingly sophisticated attack” targeting select individuals utilizing iOS versions prior to iOS 27.
Though this reported incident was highly precise, other malicious actors might endeavor to leverage the vulnerability now that its existence has been made public.
Source link: Malwarebytes.com.
