iOS 18.7.11 for older iPhones: flaw used in attacks

Apple released iOS 18.7.11 and iPadOS 18.7.11 on 26 October 2026. It fixes a flaw that Apple says may have been used in an extremely sophisticated attack against specific targeted people on versions of iOS before iOS 27. If anyone in your company uses an older iPhone or iPad, update it today.

What happened

The flaw is in CoreGraphics, the part of iOS that draws images and documents. Opening a specially made file could let an attacker run their own code on the phone. Apple fixed it with better checks on memory. The flaw is tracked as CVE-2026-86950.

Apple says the attacks it knows of were aimed at specific people, not the general public. Still, the update is free and quick, so there is no reason to wait.

Who is affected

• iPhone XS, iPhone XS Max and iPhone XR. These phones cannot run iOS 26 or 27, so iOS 18.7.11 is their update.
• Older iPads that stay on iPadOS 18, including iPad 7th generation.
• Any iPhone or iPad still on iOS 18 or older. Apple says the attack targeted versions before iOS 27.

Phones already on iOS 27 are not listed as affected. Apple also released iOS 27.2 and iOS 26.7.2 on the same day with other security fixes.

What to do

1. On each iPhone or iPad, open Settings > General > Software Update.
2. Install the update shown: iOS 18.7.11 on older phones, or iOS 27.2 on newer ones.
3. Turn on Automatic Updates on the same screen, so the next fix installs by itself.
4. Do not open files or links from people you do not know, even in WhatsApp or email, until the phone is updated.
5. Company phones used by staff: send this notice to everyone and ask them to confirm they have updated.

If you are not sure which phone or version a staff member has, our support team can help you check.

Source and credit

We are sharing this news from Apple. This summary is written by Synctech in our own words.

• About the security content of iOS 18.7.11 and iPadOS 18.7.11, Apple, 26 October 2026: https://support.apple.com/en-us/149225
• About the security content of iOS 27.2 and iPadOS 27.2, Apple, 26 October 2026: https://support.apple.com/en-us/149230

Retrieved 27 October 2026. Apple, iPhone, iPad and iOS are trademarks of Apple Inc. Synctech is not connected with Apple. This is general information, not legal, tax or financial advice. If anything here is wrong, email support@synctech.com.my and we will correct it.