Skip to content
NewA calmer, faster ZeroHour
StoryAdvisoryhigh

Apple Releases Updates for CoreGraphics Flaw in Older iOS Devices

1 source · 6 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Apple backported CoreGraphics zero-day fixes for older iPhones and iPads while releasing new versions for recent platforms.

Apple issued security updates on October 26 addressing vulnerabilities in CoreGraphics, Audio, and CoreMedia components. The out-of-bounds write CVE-2026-86950 in CoreGraphics may have been exploited in targeted attacks on iOS before version 27, with backports covering iPhone XS, XS Max, XR and iPad 7th generation devices. Additional fixes include Audio leak CVE-2026-65339 and CoreMedia camera access CVE-2026-86990. macOS, visionOS and other platforms received corresponding updates.

Key facts
  • CVE-2026-86950: out-of-bounds write in CoreGraphics
  • iOS 18.7.11 and iPadOS 18.7.11 backports for older devices
  • iPhone XS, XS Max, XR, iPad 7th generation affected
  • macOS Golden Gate 27.2 and Tahoe 26.7.2 also updated
  • visionOS 27.2 covers all Apple Vision Pro models
  • Apple advises Lockdown Mode for high-risk users
Analyze CVE-2026-86950 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first
  1. Oct 26, 2026Apple releases iOS 18.7.11 and iPadOS 18.7.11 backports · BleepingComputer
  2. Oct 27, 2026Full Disclosure posts multiple APPLE-SA advisories · Full Disclosure
  3. Oct 28, 2026Canadian Centre issues AV26-1099 advisory · Canadian Centre for Cyber Security
  4. Oct 29, 2026Malwarebytes reports older device updates · Malwarebytes Labs

What each outlet adds

beyond the shared facts
  • Full DisclosureDetails specific advisories for Accelerate Framework on iOS 27.2 and macOS
  • BleepingComputerExplained targeted attacks and second exploited zero-day of the year
  • Cyber Security NewsNamed CVEs including Audio and CoreMedia flaws
  • Canadian Centre for Cyber SecurityUnified list of affected builds across all Apple platforms
CVEs
CVE-2026-86950CVE-2026-65339CVE-2026-86990
Vendors
Apple
Products
iOSiPadOSCoreGraphicsCoreMediamacOSvisionOStvOSwatchOSSafarimacOS Golden GateAccelerate FrameworkmacOS Tahoe
Organizations
MetaMeta Product SecurityCanadian Centre for Cyber Security

Coverage

oldest first · one row per article · UTC
  1. · 8d ago Full DisclosureFirst report

    Apple issues iOS 27.2 and iPadOS 27.2 security update

    The notice names the Accelerate Framework for iPhone 11 and later and newer iPad Pro models.

  2. · 8d ago Full Disclosure

    Apple issues iOS 26.7.2 and iPadOS 26.7.2 security update

    The notice names the Accelerate Framework and starts the device list at iPhone 11 and later.

  3. · 8d ago Full Disclosure

    Apple issues iOS 18.7.11 and iPadOS 18.7.11 security update

    The notice names the Audio component and lists older iPhone and iPad models that receive the update.

  4. · 8d ago Full Disclosure

    Apple releases macOS Golden Gate 27.2 security update

    The posted note says a crafted image processed by Accelerate Framework may lead to an impact that the snippet cuts off.

  5. · 8d ago Full Disclosure

    visionOS 27.2 updates Accelerate Framework image handling

    The issue applies to Apple Vision Pro on all models; the crafted-image impact line is truncated.

  6. · 8d ago Full Disclosure

    macOS Tahoe 26.7.2 fixes Accelerate Framework image issue

    The advisory says a crafted image may cause unexpected app behavior; the impact line is cut off.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-65339
A logic issue was addressed with improved checks
5.0<1%
CVE-2026-86950
Out-of-Bounds Write in Apple CoreGraphics Enables Code Execution on iOS and macOS
8.826%KEVPoC ×3
KEV
CVE-2026-86990
Camera access without permission on Apple devices
——