Apple addressed at least 329 unique security vulnerabilities across today’s system updates

Description

Apple has updated its security releases page with details of the vulnerabilities addressed in today’s updates to iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. Here are the details.

Apple details security releases from today’s updates

Whenever Apple releases software updates, the company also usually updates its security releases page with details of the vulnerabilities addressed.

Today, the company updated the page with the security content for the following system updates:

Name and information linkAvailable foriOS 27.2 and iPadOS 27.2iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and lateriOS 26.7.2 and iPadOS 26.7.2iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and lateriOS 18.7.11 and iPadOS 18.7.11iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationmacOS Golden Gate 27.2macOS Golden GatemacOS Tahoe 26.7.2macOS TahoemacOS Sequoia 15.8.2macOS SequoiatvOS 27.2Apple TV 4K 2nd generation and laterwatchOS 27.2Apple Watch Series 9 and latervisionOS 27.2Apple Vision Pro (all models)Safari 27.2macOS Sequoia and macOS TahoetvOS 26.6.1
This update has no published CVE entries.Apple TV HD and Apple TV 4K 1st generation

In total, Apple addressed 329 unique security vulnerabilities across today’s software releases. Many of these vulnerabilities affect multiple operating systems, resulting in a whopping combined total of 1,265 CVE listings.

These numbers may still increase, as Apple regularly adds new entries and updates existing ones in its security advisories after their initial publication.

Among the most notable security fixes are a CoreMedia issue that could let a malicious app access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without permission (CVE-2026-86990), and an Apple Intelligence vulnerability that could let a remote attacker access sensitive user data on supported iPhones and iPads (CVE-2026-86987).

Apple also addressed a Siri vulnerability in macOS Tahoe that could let an app access sensitive user data (CVE-2026-43736), along with multiple WebKit flaws that could allow maliciously crafted web content to execute arbitrary code.

Specifically, when it comes to WebKit, Apple has been on a security-patching spree in recent months, partly driven by the growing use of AI tools to uncover vulnerabilities. (In today’s updates alone, Apple credited AI tools and research teams for several vulnerabilities across its software.)

Earlier this year, the company also released multiple updates to fix flaws exploited by Coruna and DarkSword on older devices. Both exploit kits used WebKit vulnerabilities as part of attack chains that compromised iPhones running older versions of iOS.

And speaking of older versions of iOS, today’s updates also bring a previously released CoreGraphics fix to devices still running iOS 18 and iPadOS 18. The vulnerability could allow a maliciously crafted file to trigger arbitrary code execution (CVE-2026-86950).

Apple first addressed the issue in updates released last month, warning that it may have been exploited in an extremely sophisticated attack against specific targeted individuals running versions of iOS before iOS 27.

You can check out the security fixes included in each update through the links above. For Apple’s complete security releases page, follow ⁠this link.

Worth checking out on Amazon

FTC: We use income earning auto affiliate links. More.