Apple 27.2: 286 CVEs, one zero-day, and a fix that travels backwards.
CVE-2026-86950 (CoreGraphics) was exploited in the wild and patched in September — for modern devices. Older iPhones capped at iOS 18 had no fix available for a month.
iOS 18.7.11 is the backport. If you’re holding older hardware, this is your window.
Also: Calif.io is about to publish an untethered jailbreak for iOS ≤ 27.0.1. Patch before it drops.
Full breakdown: threataft.com/articles/apple-ios-macos-27-2-cve-2026-86950-zero-day