Earlier this month, Apple released iOS 27 alongside iOS 26.7 for users who wanted to stick with the older version. Now, just two weeks later, Apple has rolled out iOS 26.7.1 with an important security fix. If your iPhone is still running iOS 26, you’ll want to install this update as soon as possible.
iOS 26.7.1 Update: What's New?
Apple's release notes for the iOS 26.7.1 update simply say that it "provides important security fixes". However, Apple's security page tells us more. The iOS 26.7.1 update has fixed a bug in CoreGraphics, which handles how images and documents are drawn on screen in iOS.
According to Apple, processing a maliciously crafted file may lead to arbitrary code execution. In simple terms, an attacker could send you a specially crafted file and use it to run their own code on your iPhone.
More importantly, Apple says it is aware of reports that this flaw "may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27."
Here is a detailed breakdown of the bug fix that the iOS 26.7.1 update has pushed:
| Detail | Info |
|---|---|
| Component | CoreGraphics |
| CVE ID | CVE-2026-86950 |
| Issue | Out-of-bounds write |
| Impact | A malicious file may lead to arbitrary code execution |
| Exploited in the wild? | Possibly, in targeted attacks |
| Reported by | Meta Product Security |
That said, attacks like these usually target specific people, such as journalists, activists, and officials. Most regular users are unlikely to be targeted. Even so, there's no reason to take the risk when the fix is just one update away.
Hence, to get the fix, users can download and install the iOS 26.7.1 update by heading to Settings -> General -> Software Update.
All iOS 26 eligible users can download the new update and then decide whether to shift to the stable iOS 27 update or not.
Related Articles
