Apple Releases Emergency iOS 26.7.1 Update to Patch Targeted CoreGraphics Flaw

In September 2026 Apple issued iOS 26.7.1 as a standalone emergency update for iPhone 11 and later, iPad Pro 12.9-inch 3rd gen and later, iPad Pro 11-inch 1st gen and later, iPad Air 3rd gen and later, iPad 8th gen and later, and iPad mini 5th gen and later. The update is positioned as a rapid fix for a security issue affecting devices running iOS versions prior to iOS 27. Apple advises users to install the update via Settings -> General -> Software Update.

ForbesCNETApple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

The vulnerability, tracked as CVE-2026-86950, is an out-of-bounds write in the CoreGraphics rendering framework. Processing a maliciously crafted file could allow arbitrary code execution, potentially enabling an attacker to steal data or gain full control of the device. Apple describes the flaw as a “zero-day” that may have been actively exploited in an “extremely sophisticated attack” against specific targeted individuals. The company’s release notes indicate that the issue affects iOS versions before iOS 27, while iOS 27 and later are not vulnerable.

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks ForbesCNET

Adam Boynton, senior enterprise strategy manager at Jamf, emphasizes that many organizations keep devices on older supported OS branches (e.g., iOS 26, macOS Tahoe 26, macOS Sequoia 15) to avoid premature upgrades. He notes that Apple’s management controls allow administrators to identify devices still on affected branches and push the patch quickly. For users who suspect they have been targeted, a temporary mitigation is to power-cycle the device, though Apple recommends updating or, in extreme cases, replacing the iPhone.

Forbes

The company also credited Meta Product Security with discovering and reporting the flaw and indicated that the update improves bounds checking in CoreGraphics. Apple did not provide details on the number of individuals affected, the success of any attacks, or the timeline of exploitation.

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

• “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27 ,” — Apple

Forbes