Apple Releases Security Patch for Older iOS and macOS Versions to Fix Critical Vulnerability
Apple has released updates for devices not yet running OS 27, addressing a serious CoreGraphics vulnerability that has been exploited in sophisticated attacks against specific individuals. The patches, versions 26.7.1 for iOS and 15.8.1 for macOS, resolve an out-of-bounds write issue that could allow arbitrary code execution when processing malicious files.
Apple addressed a critical flaw in CoreGraphics, a foundational graphics processing component, that allowed attackers to execute unauthorized code by tricking users into opening specially crafted files. The company discovered evidence that this vulnerability had already been weaponized in real-world attacks targeting particular individuals, though the sophisticated nature of these campaigns suggested limited scope rather than widespread exploitation.
The security patch rollout demonstrates Apple's tiered update strategy. Rather than forcing all users to upgrade to the newest OS version, the company provided targeted fixes for older supported devices running iOS 26 and macOS Sequoia, ensuring that users unable or unwilling to pursue major OS upgrades could still receive critical protection without unnecessary feature additions.
This vulnerability may particularly concern high-value targets such as government officials, journalists, and activists who face elevated cybersecurity risks. Most general users are unlikely to face direct threat from this specific flaw. The patch availability for older OS versions could help organizations managing legacy device ecosystems maintain security posture without forced modernization, though it may also create fragmented protection levels across user populations depending on update compliance rates.