1-minute read
What a defender needs to know
Apple released iOS 18.7.11 and iPadOS 18.7.11 on October 26 to fix a CoreGraphics out-of-bounds write. Processing a maliciously crafted file may lead to arbitrary code execution. Apple says a report of possible exploitation involves an extremely sophisticated attack on specific people using iOS versions before iOS 27; CISA’s enrichment in the Apple-assigned CVE record lists CVE-2026-86950 as known exploited.
The release also fixes Audio CVE-2026-65339, which could let an app leak sensitive information, and CoreMedia CVE-2026-86990, which could let a malicious app access the camera without permission. The CoreGraphics CVE record names separate fixes for other iOS, iPadOS, and macOS branches.
Compare your managed-device models and installed OS branches with Apple’s affected-device list. Update eligible 18-series devices, including the listed iPhone XS, XS Max and XR models, to 18.7.11. Once each device reconnects, query the installed version in device management: every device expected to receive that update should report 18.7.11. Investigate older builds and missing check-ins. For a targeted-attack lead, preserve device and management history for incident response and review it for earlier activity.