Apple has published details regarding the security fixes included in its latest software releases for iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. The company addressed at least 329 unique security vulnerabilities across these updates, according to its updated security releases page.
While the 329 figure represents unique issues, many of these vulnerabilities affect multiple operating systems. This overlap results in a combined total of 1,265 Common Vulnerabilities and Exposures (CVE) listings. Apple noted that these numbers may still increase, as the company regularly adds new entries and updates existing ones in its security advisories after their initial publication.
CoreMedia and Apple Intelligence Fixes
Among the most significant fixes is a CoreMedia issue identified as CVE-2026-86990. This vulnerability could allow a malicious app to access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without user permission. Another critical fix addresses an Apple Intelligence vulnerability, CVE-2026-86987, which could enable a remote attacker to access sensitive user data on supported iPhones and iPads.
Apple also resolved a Siri vulnerability in macOS Tahoe, designated CVE-2026-43736, that could let an app access sensitive user data. Additionally, the company patched multiple WebKit flaws that could allow maliciously crafted web content to execute arbitrary code.
WebKit Patching and Older iOS Versions
Apple has been actively patching WebKit vulnerabilities in recent months, partly driven by the growing use of AI tools to uncover security flaws. In today’s updates alone, Apple credited AI tools and research teams for identifying several vulnerabilities across its software.
This follows earlier efforts this year to fix flaws exploited by the Coruna and DarkSword exploit kits. Both kits used WebKit vulnerabilities as part of attack chains that compromised iPhones running older versions of iOS.
Today’s updates also bring a previously released CoreGraphics fix to devices still running iOS 18 and iPadOS 18. This fix addresses CVE-2026-86950, a vulnerability that could allow a maliciously crafted file to trigger arbitrary code execution. Apple first addressed this issue in updates released last month, warning that it may have been exploited in an extremely sophisticated attack against specific targeted individuals running versions of iOS before iOS 27.
The complete list of security fixes for each update is available on Apple’s security releases page.
Source: 9to5Mac
