Apple released iOS 18.7.11 on October 26th for <a href="https://myappsplus.com/weve-tested-the-i<a href="https://myappsplus.com/jennings-deputies-to-soon-launch-new-phone-app/” title=”Jennings deputies to soon launch new phone app”>phone-duo-and-iphone-18-pro-max-heres-the-phone-you-should-actually-buy/” title=”We've tested the iPhone Duo and iPhone 18 Pro Max — here's the phone you should actually buy”>iPhone XS, XS Max, and XR, patching three vulnerabilities in CoreGraphics, Audio, and CoreMedia; iPadOS 18.7.11 also received an update.
Apple has released the iOS 18.7.11 security update for the iPhone XS, iPhone XS Max, and iPhone XR, devices that are no longer capable of upgrading to newer operating systems. The patch addresses three security vulnerabilities, including one that the company warns may have been exploited by hackers in targeted attacks.
According to information posted on Apple’s security support page, iOS 18.7.11 was released on October 26th and is exclusive to the aforementioned trio of iPhones.
CVE-2026-86950 in CoreGraphics: The most concerning vulnerability.
The centerpiece of the patch is the CVE-2026-86950 vulnerability in the CoreGraphics component. This flaw allows an attacker to execute arbitrary code on a victim’s device simply by tricking the user into processing a file containing malicious content.
Notably, Apple confirmed receiving reports that this vulnerability may have been exploited in a highly sophisticated attack campaign. The target was specific individuals using operating system versions prior to iOS 27. The company did not disclose the identities of the targets or the scale of the attack.
The remaining two vulnerabilities are: data leaks and unauthorized camera access.
Alongside CoreGraphics, iOS 18.7.11 addresses two other vulnerabilities:
- CVE-2026-65339 (Audio): There is a risk that the application may leak sensitive user data.
- CVE-2026-86990 (CoreMedia): facilitates malicious applications to access the camera without the owner’s consent or permission.
The continued release of patches for the iPhone XS, XS Max, and XR shows that devices that can no longer upgrade to the latest iOS version are still protected through core security updates.
Which iPad models are compatible with iPadOS 18.7.11?
Not only iPhone users, but tablet users also have the corresponding iPadOS 18.7.11 update on compatible models, including:
- 7th generation iPad;
- iPad Air from the 4th generation onwards;
- iPads from the 9th generation onwards;
- iPad mini from the 6th generation onwards.
How to update and things to note before installation.
Because of the vulnerability that has been identified as potentially exploitable, delaying the upgrade will leave users exposed to continued security risks. Owners of devices on the supported list should check and install the update as soon as possible.
- Go to Settings > General > Software Update .
- When the update appears, select Download and install .
To ensure a safe and smooth update process, users should proactively back up important data, ensure their battery is fully charged, and maintain a stable Wi-Fi connection.
Original article
https://baodanang.vn/ios-18711-cho-iphone-xs-xs-max-va-xr-apple-va-3-lo-hong-co-loi-tung-bi-khai-thac-thuc-te-3357087.html
Tag:iPhone XRCVE-2026-86950Security vulnerabilityiOS 18.7.11iPhone XS
