{"id":41391,"date":"2025-08-03T18:03:09","date_gmt":"2025-08-03T18:03:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/41391\/"},"modified":"2025-08-03T18:03:09","modified_gmt":"2025-08-03T18:03:09","slug":"ios-18-6-fixes-24-security-flaws-update-your-iphone-right-now","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/41391\/","title":{"rendered":"iOS 18.6 fixes 24 security flaws \u2014 update your iPhone right now"},"content":{"rendered":"<p>Most Apple users are thinking about <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.tomsguide.com\/phones\/iphones\/ios-26-guide\" data-before-rewrite-localise=\"https:\/\/www.tomsguide.com\/phones\/iphones\/ios-26-guide\" rel=\"nofollow noopener\" target=\"_blank\">iOS 26<\/a> right now, which makes sense, as it&#8217;s the exciting new toy coming to devices around the world.<\/p>\n<p>However, while you&#8217;re waiting, you should definitely not skip the <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.tomsguide.com\/computing\/online-security\/apple-issues-security-updates-to-fix-zero-day-flaw-used-in-chrome-attacks-update-your-iphone-and-mac-right-now\" data-before-rewrite-localise=\"https:\/\/www.tomsguide.com\/computing\/online-security\/apple-issues-security-updates-to-fix-zero-day-flaw-used-in-chrome-attacks-update-your-iphone-and-mac-right-now\" rel=\"nofollow noopener\" target=\"_blank\">recently released iOS 18.6<\/a>, as it addresses a total of 24 critical security flaws that are essential for keeping your phone safe and secure, as outlined on <a data-analytics-id=\"inline-link\" href=\"https:\/\/go.redirectingat.com\/?id=92X1584493&amp;xcust=tomsguide_us_1108460981986147954&amp;xs=1&amp;url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2F124147&amp;sref=https%3A%2F%2Fwww.tomsguide.com%2Fphones%2Fiphones%2Fios-18-6-fixes-24-security-flaws-update-your-iphone-right-now\" target=\"_blank\" data-url=\"https:\/\/support.apple.com\/en-us\/124147\" referrerpolicy=\"no-referrer-when-downgrade\" rel=\"sponsored noopener nofollow\" data-hl-processed=\"skimlinks\" data-placeholder-url=\"https:\/\/go.redirectingat.com\/?id=92X1584493&amp;xcust=hawk-custom-tracking&amp;xs=1&amp;url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2F124147&amp;sref=https%3A%2F%2Fwww.tomsguide.com%2Fphones%2Fiphones%2Fios-18-6-fixes-24-security-flaws-update-your-iphone-right-now\" data-google-interstitial=\"false\" data-merchant-name=\"apple.com\" data-merchant-network=\"SkimLinks\">Apple&#8217;s support site<\/a>.<\/p>\n<p>If you&#8217;re under the impression that you can ignore this iOS version until the big release, it&#8217;s time to reconsider that stance and update your phone.<\/p>\n<p>You may like<\/p>\n<p>iOS 18.6 \u2014 what are the security fixes?<\/p>\n<p>Some of these security fixes are minor, while others are much more significant.<\/p>\n<p>Either way, they&#8217;re all worth downloading iOS 18.6 to your device. One fixed vulnerability could allow an app to access user-sensitive data. Another could cause a passcode to be read aloud by VoiceOver. There&#8217;s even the potential for address bar spoofing \u2014 scary stuff.<\/p>\n<p>Here&#8217;s the complete list of patched vulnerabilities, the systems impacted and the CVE code:<\/p>\n<p>Passcode may be read aloud by VoiceOver in Accessibility (CVE-2025-31229)Privacy Indicators for microphone or camera access may not be correctly displayed in Accessibility (CVE-2025-43217)Parsing a file may lead to an unexpected app termination in afclip (CVE-2025-43186)A non-privileged user may be able to modify restricted network settings in CFNetwork (CVE-2025-43223)Processing a maliciously crafted audio file may lead to memory corruption in CoreAudio (CVE-2025-43277)Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory in CoreMedia (CVE-2025-43210)An app may be able to access user-sensitive data in CoreMedia Playback (CVE-2025-43230)Processing maliciously crafted web content may lead to an unexpected Safari crash in ICU (CVE-2025-43209)Processing a maliciously crafted image may result in disclosure of process memory in ImageIO (CVE-2025-43226)Processing a file may lead to memory corruption in libnetcore (CVE-2025-43202)Processing a file may lead to memory corruption in libxml2 (CVE-2025-7425)Processing maliciously crafted web content may lead to memory corruption in libxslt (CVE-2025-7424)Remote content may be loaded even when the &#8216;Load Remote Images&#8217; setting is turned off in Mail Drafts (CVE-2025-31276)Processing a maliciously crafted texture may lead to unexpected app termination in Metal (CVE-2025-43234)Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory in Model I\/O (CVE-2025-43224 and CVE-2025-43221)Processing a maliciously crafted file may lead to unexpected app termination in Model I\/O (CVE-2025-31281)Visiting a malicious website may lead to address bar spoofing in WebKit (CVE-2025-43228)Processing maliciously crafted web content may disclose sensitive user information in WebKit (CVE-2025-43227)Processing maliciously crafted web content may lead to memory corruption in WebKit (CVE-2025-31278, CVE-2025-31277 and CVE-2025-31273)Processing maliciously crafted web content may lead to an unexpected Safari crash in WebKit (CVE-2025-43214, CVE-2025-43213 and CVE-2025-43212)Processing web content may lead to a denial-of-service in WebKit (CVE-2025-43211)Processing maliciously crafted web content may disclose internal states of the app in WebKit (CVE-2025-43265)Processing maliciously crafted web content may lead to an unexpected Safari crash in WebKit (CVE-2025-43216)Processing maliciously crafted web content may lead to an unexpected Safari crash in WebKit (CVE-2025-6558)<\/p>\n<p>There are some serious issues listed above, and given how easy it is to <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.tomsguide.com\/how-to\/how-to-update-an-iphone\" data-before-rewrite-localise=\"https:\/\/www.tomsguide.com\/how-to\/how-to-update-an-iphone\" rel=\"nofollow noopener\" target=\"_blank\">update your phone to the latest version of iOS<\/a>, it&#8217;s absolutely worth taking a little time to ensure you&#8217;re protected from all the issues outlined above.<\/p>\n<p class=\"newsletter-form__strapline\">Get instant access to breaking news, the hottest reviews, great deals and helpful tips.<\/p>\n<p>More from Tom&#8217;s Guide<\/p>\n<p>Today&#8217;s best Apple iPhone 16 Pro Max deals<\/p>\n","protected":false},"excerpt":{"rendered":"Most Apple users are thinking about iOS 26 right now, which makes sense, as it&#8217;s the exciting new&hellip;\n","protected":false},"author":2,"featured_media":41392,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[2306,86,56,54,55],"class_list":["post-41391","post","type-post","status-publish","format-standard","has-post-thumbnail","category-mobile","tag-mobile","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/41391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=41391"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/41391\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/41392"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=41391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=41391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=41391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}