Brief
Apple urges iOS 26 users to install 26.7.1 zero‑day security patch
The update addresses a CoreGraphics vulnerability that could allow arbitrary code execution.
By Felo News Desk · Published
Apple has told iPhone owners still on iOS 26 to download the 26.7.1 update, which patches a zero‑day CoreGraphics flaw that the company says may have been used in an “extremely sophisticated attack” against targeted individuals.
The company’s release notes state the vulnerability could enable arbitrary code execution, potentially allowing a third party to steal data or gain control of the device. Apple advises users of iOS 27 and later that they are already protected, but recommends iOS 27 users install the 27.0.1 update for the latest fixes.
To install the patch, users should go to Settings > General > Software Update > Update Now and follow the on‑screen prompts.
Key facts
- Apple released iOS 26.7.1 to patch a CoreGraphics zero‑day vulnerability. (cnet.com)
- The flaw could allow arbitrary code execution and may have been exploited in a sophisticated attack. (cnet.com)
- Apple advises iOS 26 users to install 26.7.1 and iOS 27 users to install 27.0.1. (cnet.com)
What we don't know yet
- CVE identifier for the CoreGraphics vulnerability
- Details on the specific targeted individuals or organizations
Sources
- [1] cnet.com — originally reported as “Still on iOS 26? You Need to Download iOS 26. 7. 1 Now for This Zero-Day Patch”
