Apple has released an urgent security update for iPhone and iPad users after discovering a critical vulnerability in the CoreGraphics component that could allow malicious code to be executed on the device when processing a specially crafted file.

The update, named iOS 26.7.1, is specifically designed for iPhone 11 and later models running previous versions of iOS prior to iOS 27. Apple says it has received reports that the vulnerability may have already been exploited in a highly sophisticated attack targeting specific individuals.

The issue lies within the CoreGraphics software responsible for processing and displaying graphics and images. Opening a malicious file designed in a particular way could exploit a memory bug and execute code specified by the attacker. Apple has classified the vulnerability under CVE-2026-86950 and explained that it addressed the problem by improving memory boundary checks.

According to The Daily Mail, the company did not disclose details about the attacks that may have exploited the flaw or the identities of the targeted individuals. This is a standard procedure Apple follows to minimize the risk of exploitation before updates reach users.

The update also includes iPadOS 26.7.1 for the first and later generation 11-inch iPad Pro, third and later generation 12.9-inch iPad Pro, third generation iPad Air, eighth generation iPad, and fifth generation iPad mini.

To ensure that the update is received, iPhone users can go to Settings > General > Software Update and select Download and Install if an update is available. Automatic updates can also be enabled so that the device downloads and installs updates while charging and connected to Wi-Fi.

Meanwhile, Apple has released a separate update, iOS 27.0.1, but it targets different fixes, especially for iPhone 18 Pro and iPhone 18 Pro Max phones.

The update addresses an issue that could cause the phone to restart unexpectedly when Face ID authentication fails, as well as a bug that causes color distortions in some photos taken with 2x zoom under specific lighting conditions.

iOS 27.0.1 also fixes another problem that may make the touch screen unresponsive when opening both the Notification Center and Control Center simultaneously.

The release of iOS 26.7.1 comes as a separate security measure for users of devices that have not transitioned to iOS 27, at a time when Apple is urging users to install security updates to protect their devices from vulnerabilities that may already be exploited in targeted attacks.

• Urgent warning
• Apple
• iPhone
• iPhone 18 Pro
• Serious vulnerability
• iPhone 18 Pro Max