● Covered by 2 sources · 2 reportsMedium impact2 neutral
Apple Addresses 329 Security Vulnerabilities Across System Updates
Key points
- Apple fixed 329 unique vulnerabilities across its operating systems.
- Updates address 1,265 CVE listings in total.
- Fixes include camera access, data exposure, and WebKit arbitrary code execution.
- An Apple Intelligence vulnerability could expose sensitive user data.
- Apple released updates on Monday.
- macOS Golden Gate 27.2 resolves 263 vulnerabilities.
- iOS and iPadOS 27.2 fix 163 flaws.
- Approximately 140 security holes are shared across iOS and macOS.
- A fix for CVE-2026-86950 was backported to iOS 18.
- macOS Golden Gate 27.2 patches privilege escalation flaws.
- macOS Golden Gate 27.2 fixes Screen Sharing and Remote Management security holes.
Extensive Security Patches Released
Apple has issued comprehensive security updates across its product lines, including iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. These updates collectively address 329 unique security vulnerabilities, which translate to a total of 1,265 CVE listings due to many flaws affecting multiple operating systems. The company's security advisories may see further additions or updates post-initial publication.
Key Vulnerabilities Addressed
Among the critical fixes is a CoreMedia vulnerability (CVE-2026-86990) that could allow a malicious application to access the camera on iPhones, iPads, Macs, and Apple Vision Pro without user permission. An Apple Intelligence flaw (CVE-2026-86987) was also patched, which could have enabled remote attackers to access sensitive user data on supported iPhones and iPads. Additionally, a Siri vulnerability in macOS Tahoe (CVE-2026-43736) that could expose sensitive user data was resolved.
WebKit Flaws and AI's Role
Multiple WebKit vulnerabilities, which could permit maliciously crafted web content to execute arbitrary code, were also patched. Apple has been consistently releasing WebKit security updates, partly due to the increasing use of AI tools in vulnerability discovery. Several vulnerabilities in the current updates were credited to AI tools and research teams.
Earlier this year, Apple released updates for older devices to fix WebKit flaws exploited by Coruna and DarkSword, which were part of attack chains compromising iPhones running older iOS versions.
Fixes for Older iOS Versions
The latest updates also extend a previously released CoreGraphics fix to devices still running iOS 18 and iPadOS 18. This vulnerability (CVE-2026-86950) could allow arbitrary code execution via a maliciously crafted file. Apple had initially addressed this issue last month, noting that it might have been exploited in targeted attacks against specific individuals using iOS versions prior to iOS 27.
Updates
- Apple released updates on Monday.
- macOS Golden Gate 27.2 resolves 263 vulnerabilities.
- iOS and iPadOS 27.2 fix 163 flaws.
- Approximately 140 security holes are shared across iOS and macOS.
- A fix for CVE-2026-86950 was backported to iOS 18.
- macOS Golden Gate 27.2 patches privilege escalation flaws.
- macOS Golden Gate 27.2 fixes Screen Sharing and Remote Management security holes.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Apple released updates for iOS and macOS, patching a total of 286 vulnerabilities across various operating systems. Additionally, a fix for the actively exploited CVE-2026-86950 was backported to iOS 18, addressing a critical security flaw previously patched in older versions.
Apple released software updates for iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari, patching 329 unique security vulnerabilities. These updates resolve issues including unauthorized camera access, sensitive data exposure in Apple Intelligence and Siri, and multiple WebKit flaws allowing arbitrary code execution.