Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple has backported a fix for a high-severity vulnerability tracked as CVE-2026-86950 to older iPhones and iPads. The flaw, scoring 8.8 on the CVSS scale, is an out-of-bounds write issue in the CoreGraphics framework. Exploitation of this vulnerability can lead to arbitrary code execution when a maliciously crafted file is processed. The flaw was confirmed to have been exploited in real-world cyberattacks. Apple had originally released patches last month for newer devices and has now extended coverage to legacy hardware. The backport underscores the active exploitation risk associated with this vulnerability. Users of older Apple devices are strongly encouraged to apply the update immediately.