Apple Releases iOS 26.7.1 to Patch CoreGraphics Zero-Day Exploited in Targeted Attacks
Updated
Updated · CNET · Sep 30
Apple Releases iOS 26.7.1 to Patch CoreGraphics Zero-Day Exploited in Targeted Attacks
3 articles · Updated · CNET · Sep 30
Summary
iOS 26.7.1 is now available for iPhones not yet on iOS 27, closing a CoreGraphics zero-day Apple said may have been used in an “extremely sophisticated” attack.
Apple said the flaw affects pre-iOS 27 software and could enable arbitrary code execution, letting attackers steal data or take over a device through malicious content.
The company’s wording indicates targeted exploitation against specific individuals rather than a broad campaign, but users on older software are still urged to update immediately through Settings.
Users already on iOS 27 are considered protected from this specific bug, though Apple is also recommending iOS 27.0.1 to stay fully up to date.