Apple has updated its Security Releases page with details of the vulnerabilities fixed in today’s updates for iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. Here are the details.
Apple details security releases for today’s updates
Whenever Apple releases software updates, the company also usually updates its security releases page with details about the vulnerabilities fixed.
Today, the company updated the page with security content for the following system updates:
| Link to name and information | Available for |
|---|---|
| iOS 27.2 and iPadOS 27.2 | iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later |
| iOS 26.7.2 and iPadOS 26.7.2 | iPhone 11 and later, 12.9-inch iPad Pro 3rd generation and later, 11-inch iPad Pro 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later |
| iOS 18.7.11 and iPadOS 18.7.11 | iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation |
| MacOS Golden Gate 27.2 | MacOS Golden Gate |
| macOS Tahoe 26.7.2 | macOS Tahoe |
| macOS Sequoia 15.8.2 | macOS Sequoia |
| tvOS 27.2 | Apple TV 4K 2nd generation and later |
| watchOS 27.2 | Apple Watch Series 9 and later |
| visionOS 27.2 | Apple Vision Pro (all models) |
| Safari 27.2 | macOS Sequoia and macOS Tahoe |
| tvOS 26.6.1 This update does not contain any published CVE entries. | Apple TV HD and Apple TV 4K 1st generation |
In total, Apple has fixed 329 unique security vulnerabilities in current software releases. Many of these vulnerabilities affect multiple operating systems, resulting in a cumulative total of 1,265 CVE listings.
These numbers could increase further as Apple regularly adds new entries and updates existing ones in its security advisories after their initial release.
Among the most notable security fixes are a CoreMedia issue that could allow a malicious app to access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without permission (CVE-2026-86990), and an Apple Intelligence vulnerability that could allow a remote attacker to access sensitive user data on supported iPhones and iPads (CVE-2026-86987).
Apple also fixed a Siri vulnerability in macOS Tahoe that could allow an app to access sensitive user data (CVE-2026-43736), as well as several WebKit flaws that could allow maliciously crafted web content to execute arbitrary code.
Specifically, when it comes to WebKit, Apple has been on a security patching spree in recent months, driven in part by the increasing use of AI tools to discover vulnerabilities. (In today’s updates alone, Apple attributed several vulnerabilities in its software to AI tools and research teams.)
Earlier this year, the company also released several updates to fix vulnerabilities exploited by Coruna and DarkSword on older devices. Both exploit kits used WebKit vulnerabilities as part of attack chains that compromised iPhones running older versions of iOS.
And speaking of older versions of iOS, today’s updates also bring a previously released CoreGraphics patch to devices still running iOS 18 and iPadOS 18. The vulnerability could allow a maliciously crafted file to trigger arbitrary code execution (CVE-2026-86950).
Apple first addressed the issue in updates released last month, warning that it may have been exploited in a highly sophisticated attack against specific targeted individuals running versions of iOS prior to iOS 27.
You can view the security fixes included in each update via the links above. For Apple’s full security releases page, follow this link.
To discover on Amazon
FTC: We use automatic, revenue-generating affiliate links. More.
Gn tech
