Dangerous bug: Apple fixes older operating systems, updates also for new ones | heise online

Dangerous bug: Apple fixes older operating systems, updates also for new ones

Apple has released important security fixes for iOS 26, iPadOS 26, and several older macOS versions. Bug fixes are also available for the new systems.

listen Print view
Installing iOS on an iPhone

Installing iOS on an iPhone: Important updates are available.

(Image: nikkimeel / Shutterstock.com)

3 min. read

Quick update: Anyone currently using iOS 26, iPadOS 26, macOS 26 alias Tahoe, or macOS 15 alias Sequoia should urgently update their system. Apple released iOS 26.7.1 and iPadOS 26.7.1, macOS 26.7.1, and macOS 15.8.1 for these users overnight on Tuesday. All four updates for iPhone, iPad, and Mac fix a bug in the CoreGraphics graphics routine that can be exploited to execute malicious code. According to Apple, the bug with CVE ID 2026-86950 is already being used “as part of a highly sophisticated attack targeting specifically selected individuals” who are still using iOS versions before iOS 27.

Apple provides no information about the victims or who is using the technology. Since CoreGraphics is also present in iPadOS and macOS, these devices are also vulnerable. The vulnerability exploited is an out-of-bounds write error. The problem is fixed with improved bounds checking. The vulnerability was discovered by Meta Product Security, the product security group of Facebook’s parent company.

Videos by heise

Current versions of iOS (27), iPadOS (27), and macOS (27 alias Golden Gate) are not affected by the attack. It remains unclear whether other older operating systems can also be attacked. Apple has not yet released updates for visionOS 26, watchOS 26, or tvOS 26. At least users of older Apple TV and Apple Watch devices may not be able to update to the 27 versions, as Apple has cut off compatibility here.

In addition to the critical fixes for older systems, Apple has also released iOS and iPadOS 27.0.1, macOS 27.0.1, watchOS 27.0.1 for other devices, and visionOS 27.0.1. These are bug fix updates. Apple provides no further details on macOS 27.0.1.

iOS 27.0.1 is said to fix a Face ID bug on the iPhone 18 Pro and 18 Pro Max, as well as problems with a color defect that occurred under certain lighting conditions and only at double zoom level when using the aperture f/1.48 on some new iPhones. Touchscreen issues have also occurred on other models when the notification center and control center were active simultaneously -- these updates are intended to fix them.

Empfohlener redaktioneller Inhalt

Mit Ihrer Zustimmung wird hier ein externer Preisvergleich (heise Preisvergleich) geladen.

Ich bin damit einverstanden, dass mir externe Inhalte angezeigt werden. Damit können personenbezogene Daten an Drittplattformen (heise Preisvergleich) übermittelt werden. Mehr dazu in unserer Datenschutzerklärung.

(bsc)

Don't miss any news – follow us on Facebook, LinkedIn or Mastodon.

This article was originally published in German. It was translated with technical assistance and editorially reviewed before publication.