The short version: On 26 October 2026, Apple released iOS 18.7.11 and iPadOS 18.7.11 for four older devices: iPhone XS, iPhone XS Max, iPhone XR and iPad (7th generation). Apple says one of the fixes covers a flaw that may have been used in an attack on specific, targeted people. If you own one of these devices, installing the update is a small step: starting it takes about 5 minutes, and then the download and install run on their own.
What happened
An operating system is the main software on a phone or tablet. For these devices it is called iOS (iPhone) or iPadOS (iPad). Apple released version 18.7.11 on 26 October 2026. Apple’s security page lists three fixes. Each name is a part of the system software: – CoreGraphics: Apple says that processing a “maliciously crafted file” (a file made to cause harm) may let someone run their own code (computer instructions) on the device. Apple says it is “aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.” iOS 18 is one of those versions. Apple does not say who was targeted, how many people, or whether these four devices were among them. – Audio: an app may be able to leak sensitive user information. – CoreMedia: a malicious app may be able to use the camera without permission.
Who is affected
Apple’s list of security releases names four devices for this update: – iPhone XS – iPhone XS Max – iPhone XR – iPad (7th generation)
Apple has pages that help you find your model: https://support.apple.com/en-us/108044 (iPhone) and https://support.apple.com/en-us/108043 (iPad).
Newer iPhones and iPads (iPhone 11 and later, and newer iPads) got iOS 27.2 or iOS 26.7.2 the same day. Software Update (below) shows whether an update is available for your device.
What we know and what we do not know yet
We know: the release date, the three fixes above, and Apple’s wording about the CoreGraphics flaw. Apple says it does not discuss security issues until an investigation is done and a fix is available.
We do not know yet: who was targeted, how the attack worked, or how many people were affected. Apple has not said.
Do this today (under 10 minutes)
Apple’s update page gives these steps: 1. Back up your device with iCloud or a computer. 2. Plug the device into power and connect to Wi-Fi. 3. Open Settings, tap General, then tap Software Update. 4. If an update is available, tap Download and Install and follow the steps on screen.
Starting the update takes about 5 minutes. Apple does not say how long the download and install take, so leave the device plugged in and let it finish while you do other things.
Optional, 1 minute: On the same Software Update screen, tap Automatic Updates. Apple says you can choose to have updates install overnight while the device charges on Wi-Fi. Apple says you are notified before it installs.
If you do not see an update, or you get an error message, Apple’s page explains what to do: https://support.apple.com/en-us/118575
Sources
- Apple, About the security content of iOS 18.7.11 and iPadOS 18.7.11 (26 Oct 2026): https://support.apple.com/en-us/149225
- Apple, Apple security releases (list of devices; Apple may edit it): https://support.apple.com/en-us/100100
- Apple, Update your iPhone or iPad: https://support.apple.com/en-us/118575
- Apple, Identify your iPhone model: https://support.apple.com/en-us/108044
- Apple, Identify your iPad model: https://support.apple.com/en-us/108043
Checked: 30 Oct 2026. Our disclosure: SafeinAI has no affiliate links and earns nothing from the sites or tools named on this page. If this ever changes we will say so here, on this page.
Leave a Reply