Apple has just released a new security update for iPhone XS, XS Max and XR, fixing 3 vulnerabilities, including a critical error.

Apple has just released iOS 18.7.11, a security update for iPhone models that cannot be upgraded to newer iOS versions. Notably, this update addresses three security vulnerabilities, including one that Apple warned could have been exploited in targeted attacks.

According to the announcement on the security support page, iOS 18.7.11 was released on October 26, supporting iPhone XS, iPhone XS Max and iPhone XR. Of the three issues fixed, the most notable is the vulnerability CVE-2026-86950 located in the CoreGraphics component of the operating system.

This bug could allow an attacker to execute arbitrary code on the device when the user processes a file crafted with malicious content. Apple said it has received reports of the possibility of the vulnerability being exploited in a highly sophisticated attack campaign, targeting specific individuals using iOS versions before iOS 27.

This information shows that the risk lies not only in newly discovered vulnerabilities but also in errors that have shown signs of being exploited in practice. However, Apple did not disclose the identities of those targeted or the scale of the attack campaign.

Besides CoreGraphics, iOS 18.7.11 also addresses two other vulnerabilities. Specifically, CVE-2026-65339 is related to the Audio component, which could cause the application to reveal sensitive user information. Meanwhile, CVE-2026-86990 is located in CoreMedia, which could allow a malicious application to access the camera without user permission.

Older iPhones still need security updates

Apple's continued release of patches for the iPhone XS, XS Max, and XR shows that devices that are no longer upgraded to the latest iOS version can still receive important security updates.

In addition to iPhone, Apple also released iPadOS 18.7.11 for several compatible iPad lines, including iPad 7th generation, iPad Air 4th generation and later, iPad 9th generation and above, and iPad mini 6th generation and above.

Users of compatible devices can check for updates by going to Settings > General > Software Update. If iOS 18.7.11 appears, select Download and install to proceed with the upgrade.

Before updating, users should back up important data, have a stable Wi-Fi connection, and make sure the device has enough battery.

In particular, for vulnerabilities that have been reported to be exploitable, delaying updates may cause the device to continue to face identified security risks. Therefore, iPhone XS, XS Max and XR users should check and install the patch as soon as possible.