iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1 address a major vulnerability that Apple says was used against a small number of people.
Apple’s security support pages indicate that there was a CoreGraphics out-of-bounds write issue that could be exploited with a malicious file, allowing arbitrary code execution. It has been fixed with improved bounds checking.
Apple says the flaw was exploited in a “highly sophisticated attack” against targeted individuals running older versions of iOS. Apple’s latest operating systems do not appear to be affected, and the iOS 27.0.1, iPadOS 27.0.1, and macOS Golden Gate 27.0.1 updates released today have no published CVE entries.
Although the attack was not widespread, if you are still using any version of iOS 26, iPadOS 26, macOS Tahoe, or macOS Sequoia, you should install the new updates as soon as possible. Now that the vulnerability is public, it could be further exploited against users who are not protected.
Popular stories
Apple releases iOS 26.6.2
Apple today released iOS 26.6.2 with a fix for “an issue that prevents a software update from downloading over a cellular connection.” The minor software update is rolling out for the iPhone 11 series and above. To update your iPhone, open the Settings app and tap General → Software Update. It may take a few minutes for the update to be visible to everyone. iOS 26.6.2 is coming…
Apple releases iOS 26.7 with security fixes
Alongside iOS 27, Apple today released iOS 26.7, an update to the existing iOS 26 software. Users looking for new software will see iOS 26.7 as the default update, with iOS 27 listed as an option at the bottom of the software update interface. According to Apple’s release notes, iOS 26.7 includes security fixes, but it doesn’t have any other features. Apple will eventually show iOS 27…
iOS 27 and iOS 26.7 fix over 100 security bugs
Today’s iOS 27 update fixes over 100 security vulnerabilities, which is a good reason to install the new software. If you don’t want to update to iOS 27 yet, Apple also released iOS 26.7 with over 80 security fixes. 75 of the fixes are shared across both updates, so iOS 26.7 fixes many of the same issues. There are several kernel patches, including one that could allow malware…
