Apple has released iOS 26.7.1 and iPadOS 26.7.1 to address a critical security vulnerability. The update focuses on patching a flaw in the CoreGraphics component, which handles image and interface rendering. The company confirmed that this vulnerability has already been exploited in targeted attacks.
The flaw, identified as CVE-2026-86950, is an out-of-bounds write vulnerability. It allows an attacker to execute malicious code by manipulating specifically crafted data that writes beyond allocated memory boundaries. Apple addressed the issue by improving boundary checks within the system.
While some users have linked this vulnerability to recent cryptocurrency wallet thefts involving the DarkSword attack chain, evidence suggests they may be unrelated. DarkSword typically relies on known vulnerabilities and phishing sites, such as those accessed via Safari, to infect devices.
Apple has not disclosed the specific delivery method for the exploit, such as whether it arrives via email, web, or messaging apps. Users are advised to install the latest software updates immediately to mitigate the risk of exploitation.
