security content page<\/a> lists more than 120 fixes, some of which address vulnerabilities that could allow attackers or malicious apps to execute arbitrary code, gain kernel or root privileges, access sensitive user data, bypass system protections, and more.<\/p>\nAccelerate Framework<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted image may lead to unexpected process termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-86882: Peter Malone<\/p>\n
Accessibility<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: This issue was addressed with improved data protection.<\/p>\n
CVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)<\/p>\n
Accessibility<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to identify what other apps a user has installed<\/p>\n
Description: A privacy issue was addressed with improved handling of user preferences.<\/p>\n
CVE-2026-64761: Stuart Wallace, Sindre Sorhus<\/p>\n
Accounts<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A malicious application may be able to bypass Privacy preferences<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, \uc774\uc7ac\uc601<\/p>\n
APFS<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination or write kernel memory<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84523: Cem Onat Karagun, an anonymous researcher<\/p>\n
App Store<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A local app may be able to read a persistent account identifier<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-86888: Zhongcheng Li (CK01)<\/p>\n
Apple Account<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to use the Sign In With Apple authentication flow to access the user\u2019s Apple Account<\/p>\n
Description: An authentication issue was addressed with improved state management.<\/p>\n
CVE-2026-20683: Dem0ns (@\u5929\u5e9c\u7b80\u6613\u4fe1\u5de5\u4f5c\u5ba4), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)<\/p>\n
Apple Neural Engine<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: An integer overflow was addressed with improved input validation.<\/p>\n
CVE-2026-65408: tamdao<\/p>\n
AppleAVD<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A use after free issue was addressed with improved memory management.<\/p>\n
CVE-2026-65407: Franco Belman at Blackwing Intelligence<\/p>\n
AppleDouble<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84519: Richard Zana<\/p>\n
AppleKeyStore<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A use after free issue was addressed with improved memory management.<\/p>\n
CVE-2026-84593: Meta Red Team X \u2013 Nik Tsytsarkin, Alexandre Borges<\/p>\n
Authentication Services<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to delete credentials stored in Keychain<\/p>\n
Description: This issue was addressed by removing the vulnerable code.<\/p>\n
CVE-2026-86905: Ilya Andr (andrd3v)<\/p>\n
AuthKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A local app may be able to read a persistent account identifier<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-84583: Zhongcheng Li from IES Red Team<\/p>\n
AVEVideoEncoder<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: The issue was addressed with improved checks.<\/p>\n
CVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research<\/p>\n
AVEVideoEncoder<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A type confusion issue was addressed with improved memory handling.<\/p>\n
CVE-2026-84616: Peter Malone<\/p>\n
AVEVideoEncoder<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A sandboxed app may be able to execute arbitrary code with kernel privileges<\/p>\n
Description: A race condition was addressed with improved state management.<\/p>\n
CVE-2026-84607: Ruslan Dautov<\/p>\n
BackgroundAssets<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A logic issue was addressed with improved validation.<\/p>\n
CVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security<\/p>\n
Baseband<\/p>\n
Available for: iPhone 11 and later<\/p>\n
Impact: An attacker in radio range may be able to cause unexpected system termination<\/p>\n
Description: An input validation issue was addressed with improved input validation.<\/p>\n
CVE-2026-86885: Tuan D. Hoang, Hazem Issa, and Yongdae Kim @ KAIST SysSec Lab<\/p>\n
Baseband<\/p>\n
Available for: iPhone 11 and later<\/p>\n
Impact: A remote attacker may be able to cause a denial-of-service<\/p>\n
Description: A denial-of-service issue was addressed with improved input validation.<\/p>\n
CVE-2026-86879: Hazem Issa and Yongdae Kim @ SysSec, KAIST<\/p>\n
Bluetooth<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-65414<\/p>\n
Bluetooth<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may gain unauthorized access to Bluetooth<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84560: an anonymous researcher<\/p>\n
Camera<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-86878: Sindre Sorhus, Ilya Andr (andrd3v) of Positive Technologies, Asaf Cohen<\/p>\n
CloudKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A local app may be able to read a persistent account identifier<\/p>\n
Description: An information disclosure issue was addressed with improved state management.<\/p>\n
CVE-2026-86895: Stanislav Jelezoglo<\/p>\n
CloudKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to read device name<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-86893: Heiner Gerdes<\/p>\n
copyfile<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An archive may be able to bypass Gatekeeper<\/p>\n
Description: A file quarantine bypass was addressed with additional checks.<\/p>\n
CVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher<\/p>\n
CoreMedia<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted image may lead to arbitrary code execution<\/p>\n
Description: A memory corruption issue was addressed by removing the vulnerable code.<\/p>\n
CVE-2026-64752: Nik Tsytsarkin<\/p>\n
CoreMedia<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A sandboxed process may be able to circumvent sandbox restrictions<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-86876: Chris Bailey \u2013 Short Circuit<\/p>\n
CoreMedia<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted video file may lead to unexpected app termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-65344: Siyeong kim<\/p>\n
CoreML<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A sandboxed app may be able to access restricted files<\/p>\n
Description: A permissions issue was addressed with improved path validation.<\/p>\n
CVE-2026-84624: AL Najafi, tamdao<\/p>\n
CoreMotion<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access motion data from headphones without user consent<\/p>\n
Description: An authorization issue was addressed with improved validation.<\/p>\n
CVE-2026-43737: Stuart Wallace<\/p>\n
CoreText<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing web content may lead to a denial-of-service<\/p>\n
Description: A null pointer dereference was addressed with improved input validation.<\/p>\n
CVE-2026-65412: Pavan Nallamothu<\/p>\n
CoreText<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted font may result in the disclosure of process memory<\/p>\n
Description: An out-of-bounds read was addressed with improved bounds checking.<\/p>\n
CVE-2026-84596: ret2happy, Meta Product Security<\/p>\n
CoreUI<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted file may lead to unexpected app termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)<\/p>\n
CoreUI<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause a denial of service<\/p>\n
Description: A buffer overflow was addressed with improved bounds checking.<\/p>\n
CVE-2026-84489: stratan (@5tratan), Peter Malone<\/p>\n
CoreUI<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted image may lead to unexpected app termination<\/p>\n
Description: A buffer overflow was addressed with improved bounds checking.<\/p>\n
CVE-2026-84571: stratan (@5tratan), Peter Malone<\/p>\n
CoreUI<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted asset catalog may result in disclosure of process memory<\/p>\n
Description: The issue was addressed with improved memory handling.<\/p>\n
CVE-2026-43738: Peter Malone<\/p>\n
CoreUI<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted asset catalog may lead to unexpected process termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84511: Rahul Raj, stratan (@5tratan)<\/p>\n
DeviceCheck<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to read persistent device identifiers<\/p>\n
Description: An authorization issue was addressed with improved access control.<\/p>\n
CVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)<\/p>\n
Disk Images<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: The issue was addressed with improved memory handling.<\/p>\n
CVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), flower xu, Adriatik Raci, PETOWORKS\uc758 Bugeun Choi (@Bugeun), Peter Malone, Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), Hyunwoo Kim (@v4bel)<\/p>\n
exFAT<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Mounting a maliciously crafted volume may lead to unexpected system termination<\/p>\n
Description: A heap buffer overflow was addressed with improved bounds checking.<\/p>\n
CVE-2026-84510: Meta Red Team X \u2013 Nik Tsytsarkin, Richard Zana<\/p>\n
File Bookmark<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to modify a file it only had permission to read<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-43785: Junyeong Lee (jylab.github.io), Merrick Hare, Aditya Kumar, John Nzyuko Uvyu, Narendra Singh (@_3P1C)<\/p>\n
file_cmds<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files<\/p>\n
Description: A path handling issue was addressed with improved validation.<\/p>\n
CVE-2026-84534: Geoffrey Lovelace<\/p>\n
Filters<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted file may lead to unexpected app termination<\/p>\n
Description: A memory corruption issue was addressed with improved input validation.<\/p>\n
CVE-2026-43688: Peter Malone<\/p>\n
FontParser<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted font file may lead to unexpected app termination<\/p>\n
Description: An out-of-bounds read was addressed with improved bounds checking.<\/p>\n
CVE-2026-84524: an anonymous researcher<\/p>\n
FontParser<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted font may result in the disclosure of process memory<\/p>\n
Description: An out-of-bounds read issue was addressed with improved input validation.<\/p>\n
CVE-2026-84597: Nik Tsytsarkin<\/p>\n
Foundation<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause a denial of service<\/p>\n
Description: A type confusion issue was addressed with improved memory handling.<\/p>\n
CVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research<\/p>\n
Graphics<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A race condition was addressed with improved state handling.<\/p>\n
CVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang<\/p>\n
Heimdal<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An attacker in a privileged network position may be able to modify network traffic<\/p>\n
Description: A cryptographic issue was addressed with improved integrity checks.<\/p>\n
CVE-2026-84533: Vishal Patidar, Roman Zabicki<\/p>\n
iCloud<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to identify a user across reinstalls<\/p>\n
Description: A privacy issue was addressed with improved handling of identifiers.<\/p>\n
CVE-2026-84606: Ilya Andr (andrd3v)<\/p>\n
Image Capture<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access user-sensitive data<\/p>\n
Description: A path handling issue was addressed with improved validation.<\/p>\n
CVE-2026-64756: Luke Symons<\/p>\n
ImageIO<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted image may result in disclosure of process memory<\/p>\n
Description: An uninitialized memory issue was addressed with improved memory initialization.<\/p>\n
CVE-2026-84564: Justin O\u2019Leary<\/p>\n
ImageIO<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted image may result in memory corruption<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan<\/p>\n
IOKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A use after free issue was addressed with improved memory management.<\/p>\n
CVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, \uc774\uc7ac\uc601<\/p>\n
IOMobileFrameBuffer<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory<\/p>\n
Description: An out-of-bounds access issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-65398: Chris Bailey \u2013 Short Circuit, Mustafa Calap (@ordinal0, dbg.re), David Strnadel, Meta Red Team X \u2013 Nik Tsytsarkin<\/p>\n
IOSurfaceAccelerator<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to leak sensitive kernel state<\/p>\n
Description: An information leakage was addressed with additional validation.<\/p>\n
CVE-2026-64760: an anonymous researcher, Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence<\/p>\n
iWork<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A malicious app may be able to break out of its sandbox<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-65354: Csaba Fitzl (@theevilbit) of Iru<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-28968: genter0, Svetoslav Stolarov & Aisa Fox, Josh Maine of Calif.io, Dun<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory<\/p>\n
Description: The issue was addressed with improved memory handling.<\/p>\n
CVE-2026-84566: Bernhard Jackiewicz<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A local user may be able to cause unexpected system termination or read kernel memory<\/p>\n
Description: A race condition was addressed with additional validation.<\/p>\n
CVE-2026-65415: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ryan Hileman via Xint Code (xint.io)<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory<\/p>\n
Description: A double free issue was addressed with improved memory management.<\/p>\n
CVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A race condition was addressed with improved state handling.<\/p>\n
CVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security<\/p>\n
CVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
CVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A memory corruption issue was addressed with improved memory handling.<\/p>\n
CVE-2026-65377: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ye Zhang (@VAR10CK) of Baidu Security<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app with root privileges may be able to read uninitialized kernel memory<\/p>\n
Description: A memory initialization issue was addressed with improved memory handling.<\/p>\n
CVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A malicious app may be able to gain root privileges<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-43689: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Connecting to a malicious NFS server may disclose kernel memory<\/p>\n
Description: The issue was addressed with improved memory handling.<\/p>\n
CVE-2026-43687: R4mbb of KRsecurity, Peter Malone<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Connecting to a malicious NFS server may lead to kernel memory corruption<\/p>\n
Description: A use-after-free issue was addressed with improved memory management.<\/p>\n
CVE-2026-43686: Peter Malone<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to determine kernel memory layout<\/p>\n
Description: A memory initialization issue was addressed with improved memory handling.<\/p>\n
CVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to disclose kernel memory<\/p>\n
Description: An information disclosure issue was addressed with improved memory management.<\/p>\n
CVE-2026-84530: Vladislav Shevchenko (Positive Technologies)<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A use after free issue was addressed with improved memory management.<\/p>\n
CVE-2026-84521: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
CVE-2026-65402: F\u00e1bio Lu\u00eds @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A local user may be able to cause unexpected system termination or read kernel memory<\/p>\n
Description: An out-of-bounds read was addressed with improved bounds checking.<\/p>\n
CVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory<\/p>\n
Description: A race condition was addressed with improved state handling.<\/p>\n
CVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to disclose kernel memory<\/p>\n
Description: An out-of-bounds read was addressed with improved input validation.<\/p>\n
CVE-2026-86903: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
Kernel<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause unexpected system termination<\/p>\n
Description: A type confusion issue was addressed with improved checks.<\/p>\n
CVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.<\/p>\n
libarchive<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted file may lead to unexpected app termination<\/p>\n
Description: A heap buffer overflow was addressed with improved bounds checking.<\/p>\n
CVE-2026-86870: Kitten Food<\/p>\n
Managed Configuration<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A privacy issue was addressed with improved handling of files.<\/p>\n
CVE-2026-86883: Sindre Sorhus, Morris Richman (@morrisinlife), Stuart Wallace, Tristan Brennan<\/p>\n
MediaRemote<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A sandboxed app may be able to access the System Keychain<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84628: Myeonghun Pak, Nathaniel Oh (@calysteon), Alan Banderas (@creeper4004)<\/p>\n
MobileAccessoryUpdater<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Connecting a malicious accessory may cause unexpected system termination<\/p>\n
Description: A memory corruption issue was addressed with improved input validation.<\/p>\n
CVE-2026-86924: Matthew Zamat<\/p>\n
MobileBackup<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to modify protected parts of the file system<\/p>\n
Description: A path handling issue was addressed with improved validation.<\/p>\n
CVE-2026-65411: Rodolphe Brunetti (@eisw0lf) of Lupus Nova<\/p>\n
MobileBackup<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An attacker with physical access to a trust-paired device may be able to read and write arbitrary files<\/p>\n
Description: A path traversal issue was addressed with improved path validation.<\/p>\n
CVE-2026-84598: Drin Raci of sentry.security<\/p>\n
Model I\/O<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Opening a maliciously crafted file may lead to unexpected process termination<\/p>\n
Description: A buffer overflow was addressed with improved size validation.<\/p>\n
CVE-2026-84497: Yi\u011fit Can YILMAZ (@yilmazcanyigit)<\/p>\n
Music<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84615: Stanislav Jelezoglo<\/p>\n
NetworkExtension<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos<\/p>\n
NetworkExtension<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to identify what other apps a user has installed<\/p>\n
Description: An information disclosure issue was addressed with improved state management.<\/p>\n
CVE-2026-84626: Sindre Sorhus, Hoffcona of IES Red Team<\/p>\n
Photos Storage<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-84491: an anonymous researcher<\/p>\n
Photos Storage<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to fingerprint the user<\/p>\n
Description: This issue was addressed with additional entitlement checks.<\/p>\n
CVE-2026-84629: Stanislav Jelezoglo<\/p>\n
Power Management<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to fingerprint the device<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84623: Ilya Andr (andrd3v)<\/p>\n
RealityKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted file may lead to unexpected app termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-28966: stratan (@5tratan)<\/p>\n
RealityKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory<\/p>\n
Description: An out-of-bounds read issue was addressed with improved input validation.<\/p>\n
CVE-2026-84532: Hongsik Kim (mnur), stratan (@5tratan)<\/p>\n
Reminders<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: This issue was addressed with improved checks.<\/p>\n
CVE-2026-65403: Rahul Raj<\/p>\n
Safari<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A malicious website may be able to determine what apps a user has installed<\/p>\n
Description: This issue was addressed through improved state management.<\/p>\n
CVE-2026-84518: B\u00e1lint Magyar (balintmagyar.com)<\/p>\n
Safe Browsing<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: This issue was addressed with additional entitlement checks.<\/p>\n
CVE-2026-86897: Stuart Wallace<\/p>\n
Sandbox<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to bypass network restrictions<\/p>\n
Description: A logic issue was addressed with improved validation.<\/p>\n
CVE-2026-84551: Issa Sancho<\/p>\n
Sandbox Profiles<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to fingerprint the user<\/p>\n
Description: A permissions issue was addressed with additional sandbox restrictions.<\/p>\n
CVE-2026-84625: Ilya Andr (andrd3v) of Positive Technologies, CJ Vana<\/p>\n
Sandbox Profiles<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-84603: Gongyu Ma (@Mezone0), CJ Vana, Stanislav Jelezoglo<\/p>\n
SceneKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted file may result in disclosure of process memory<\/p>\n
Description: An integer overflow was addressed with improved input validation.<\/p>\n
CVE-2026-84487: stratan (@5tratan), Dhiyanesh Selvaraj (@redroot97), Peter Malone<\/p>\n
SceneKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted 3D model may lead to memory corruption<\/p>\n
Description: The issue was addressed with improved memory handling.<\/p>\n
CVE-2026-84632: Peter Malone<\/p>\n
SceneKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted 3D model may lead to memory corruption<\/p>\n
Description: An integer overflow was addressed with improved input validation.<\/p>\n
CVE-2026-84620: Peter Malone<\/p>\n
SceneKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted 3D model may lead to memory corruption<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone<\/p>\n
CVE-2026-84611: Nathaniel Oh (@calysteon)<\/p>\n
SceneKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing a maliciously crafted 3D scene may lead to unexpected process termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84526: stratan (@5tratan)<\/p>\n
Security<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages<\/p>\n
Description: A certificate validation issue was addressed with improved certificate validation.<\/p>\n
CVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak<\/p>\n
Security<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing maliciously crafted NTLM input may lead to unexpected app termination<\/p>\n
Description: An out-of-bounds write issue was addressed with improved bounds checking.<\/p>\n
CVE-2026-84531: Meshaal (@unrealmesh)<\/p>\n
Shortcuts<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A malicious shortcut may be able to send messages without user confirmation<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84600: Owen Pawling (@owenpawling)<\/p>\n
Siri<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-86884: Stanislav Jelezoglo, Gongyu Ma (twitter @Mezone0)<\/p>\n
Siri Suggestions<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An attacker with physical access to a locked device may be able to view sensitive user information<\/p>\n
Description: A logic issue was addressed with improved checks.<\/p>\n
CVE-2026-86890: Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India<\/p>\n
Software Update<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to modify protected system files<\/p>\n
Description: A permissions issue was addressed with improved path validation.<\/p>\n
CVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team<\/p>\n
Spotlight<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: An authorization issue was addressed with improved access control.<\/p>\n
CVE-2026-84621: Abodi Dawoud, Armend Gashi, Ujjwal Reddy Kalvolu Sreenivasa Reddy, Johan Wahyudi<\/p>\n
SpringBoard<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to cause a denial-of-service<\/p>\n
Description: This issue was addressed with additional entitlement checks.<\/p>\n
CVE-2026-86892: Lehan Dilusha Jayasingha<\/p>\n
Storage<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to modify protected parts of the file system<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-65348: J\u00e9r\u00f4me Djouder<\/p>\n
Storage<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access user-sensitive data<\/p>\n
Description: A permissions issue was addressed with additional restrictions.<\/p>\n
CVE-2026-65345: Seung Je Seong, Ilya Andr (andrd3v) of Positive Technologies, Jakob Pammer, \uc774\uc7ac\uc601<\/p>\n
Symptom Framework<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: A malicious application may be able to determine a user\u2019s current location<\/p>\n
Description: A privacy issue was addressed with improved private data redaction for log entries.<\/p>\n
CVE-2026-84513: Sindre Sorhus<\/p>\n
TCC<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to modify protected system files<\/p>\n
Description: A path traversal issue was addressed with improved input validation.<\/p>\n
CVE-2026-86886: Constantin Clerc, Shad J, huami1314 (@huamidev), Huy Nguyen (@34306) of Calif.io, an anonymous researcher<\/p>\n
TCC<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: A logging issue was addressed with improved data redaction.<\/p>\n
CVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom<\/p>\n
Telephony<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic<\/p>\n
Description: An authentication issue was addressed with improved state management.<\/p>\n
CVE-2026-65329: Bedran Karakoc, Tobias Funke, Jacopo Clark, Katharina Kohls of Ruhr University Bochum<\/p>\n
Time Zone<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to bypass certain Privacy preferences<\/p>\n
Description: A privacy issue was addressed by removing sensitive data.<\/p>\n
CVE-2026-86887: an anonymous researcher<\/p>\n
Watch App<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to track users across apps and websites without permission<\/p>\n
Description: A privacy issue was addressed with improved state management.<\/p>\n
CVE-2026-86904: Stanislav Jelezoglo<\/p>\n
WebKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing maliciously crafted web content may lead to an unexpected process termination<\/p>\n
Description: A logic issue was addressed with improved state management.<\/p>\n
WebKit Bugzilla: 310457<\/p>\n
CVE-2026-84635: Souta Sugiyama<\/p>\n
WebKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing maliciously crafted web content may disclose sensitive user information<\/p>\n
Description: A permissions issue was addressed by removing the vulnerable code.<\/p>\n
WebKit Bugzilla: 315121<\/p>\n
CVE-2026-64753: Viggo Lekdorf<\/p>\n
WebKit<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Opening a maliciously crafted webarchive file may lead to universal cross-site scripting<\/p>\n
Description: A logic issue was addressed with improved state management.<\/p>\n
WebKit Bugzilla: 3182711<\/p>\n
CVE-2026-86898: Tomi Garcia (archyxsec)<\/p>\n
WebKit Canvas<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash<\/p>\n
Description: A use-after-free issue was addressed with improved memory management.<\/p>\n
WebKit Bugzilla: 313935<\/p>\n
CVE-2026-64718: Niels Hofmans, OGINOME Tomohito, an anonymous researcher<\/p>\n
Wi-Fi3<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication<\/p>\n
Description: An authentication issue was addressed with improved state management.<\/p>\n
CVE-2026-43674: Yusuf Kelany<\/p>\n
Wi-Fi Connectivity<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84636: Jian Lee (@speedyfriend433)<\/p>\n
XPC<\/p>\n
Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later<\/p>\n
Impact: An app may be able to access sensitive user data<\/p>\n
Description: An authorization issue was addressed with improved state management.<\/p>\n
CVE-2026-84617: Stuart Wallace<\/p>\n
Additional recognition<\/p>\n
Accessibility<\/p>\n
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India for their assistance.<\/p>\n
Accounts<\/p>\n
We would like to acknowledge Wojciech Regula of SecuRing (wojciechregula.blog) for their assistance.<\/p>\n
Apple Intelligence<\/p>\n
We would like to acknowledge an anonymous researcher for their assistance.<\/p>\n
AppleKeyStore<\/p>\n
We would like to acknowledge Abdurrahman Nafi, Francisco Knabe, Karol Mazurek (@Karmaz95) of AFINE, Somair Ansar, YOKI, an anonymous researcher, \u6653\u5a1f \u8c22 for their assistance.<\/p>\n
Audio<\/p>\n
We would like to acknowledge Dhiyanesh Selvaraj (@redroot97) for their assistance.<\/p>\n
AutoFill<\/p>\n
We would like to acknowledge Bistrit Dahal, Oussama Barbar, SalahAldeen Yousef for their assistance.<\/p>\n
AVEVideoEncoder<\/p>\n
We would like to acknowledge tamdao for their assistance.<\/p>\n
Baseband<\/p>\n
We would like to acknowledge Kai Tu, Tianchang Yang, Xiaotian Zhou, Ali Ranjbar, Abdullah Al Ishtiaq, Tianwei Wu, Yilu Dong, Syed Rafiul Hussain \u2014 SyNSec Lab at Penn State for their assistance.<\/p>\n
Bluetooth<\/p>\n
We would like to acknowledge David Maynor, Jason Grove, Suresh Sundaram, Youssef Ahmed Saad, jioundai for their assistance.<\/p>\n
BOM<\/p>\n
We would like to acknowledge 2ourc3 | Salim Largo for their assistance.<\/p>\n
Calendar<\/p>\n
We would like to acknowledge Atul Kishor Jaiswal, Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.<\/p>\n
CipherML<\/p>\n
We would like to acknowledge Nils Hanff (@nils1729@chaos.social) of Hasso Plattner Institute for their assistance.<\/p>\n
CloudKit<\/p>\n
We would like to acknowledge Ahmed Alwardani, Hikerell (Loadshine Lab) for their assistance.<\/p>\n
Contacts<\/p>\n
We would like to acknowledge \uc774\uc9c0\uc548 (@speedyfriend433) for their assistance.<\/p>\n
copyfile<\/p>\n
We would like to acknowledge Morris Richman (@morrisinlife) and Jian Lee (@speedyfriend433) for their assistance.<\/p>\n
Core Location<\/p>\n
We would like to acknowledge CJ Vana for their assistance.<\/p>\n
CoreAnimation<\/p>\n
We would like to acknowledge Duy Tr\u1ea7n (@khanhduytran0) for their assistance.<\/p>\n
CoreAudio<\/p>\n
We would like to acknowledge Patrick Saif \/ x.com\/weezerOSINT \/ github.com\/sai2fast for their assistance.<\/p>\n
CoreBluetooth \u2013 LE<\/p>\n
We would like to acknowledge Ashmit Sharma & Atul RV, Dun, Maliq Barnard, Nicholas C. of Onymos Inc. (onymos.com), Peter Malone, Robert M for their assistance.<\/p>\n
CoreCrypto<\/p>\n
We would like to acknowledge Lakshay Sharma for their assistance.<\/p>\n
CoreGraphics<\/p>\n
We would like to acknowledge Gandalf4a of PKU-Changsha Institute for Computing and Digital Economy for their assistance.<\/p>\n
CoreMedia<\/p>\n
We would like to acknowledge Chris Bailey \u2013 Short Circuit for their assistance.<\/p>\n
CoreText<\/p>\n
We would like to acknowledge Chris Bailey \u2013 Short Circuit, Jian Lee (@speedyfriend433), shobhit srivastav for their assistance.<\/p>\n
CoreUI<\/p>\n
We would like to acknowledge Peter Malone for their assistance.<\/p>\n
DataAccess<\/p>\n
We would like to acknowledge Adetayo Adebimpe (Cyboghostginx) for their assistance.<\/p>\n
DiskArbitration<\/p>\n
We would like to acknowledge Arni Hardarson (Neonix Security), FRO, Mustafa Ahmed, Thomas Guillem, \u4e5d\u5bab\u683c of Chongqing Telecom for their assistance.<\/p>\n
FaceTime<\/p>\n
We would like to acknowledge Souhaib Naceri for their assistance.<\/p>\n
Files<\/p>\n
We would like to acknowledge an anonymous researcher for their assistance.<\/p>\n
Foundation<\/p>\n
We would like to acknowledge Daniel Luedke, Pavan Nallamothu, Peter Malone, Tiago \u201cBalgan\u201d Henriques for their assistance.<\/p>\n
HFS<\/p>\n
We would like to acknowledge an anonymous researcher for their assistance.<\/p>\n
iCloud<\/p>\n
We would like to acknowledge 3ndy1(@_3ndy1) and moyu for their assistance.<\/p>\n
iCloud Photo Library<\/p>\n
We would like to acknowledge an anonymous researcher for their assistance.<\/p>\n
ImageIO<\/p>\n
We would like to acknowledge Muhamad Syaiful, an anonymous researcher, songbird for their assistance.<\/p>\n
IOMobileFrameBuffer<\/p>\n
We would like to acknowledge Iain Harkiss, Jian Lee (@speedyfriend433) for their assistance.<\/p>\n
IOSurface<\/p>\n
We would like to acknowledge N.M.Praveen Nawarathne (@zblockrat), \u0e18\u0e19\u0e01\u0e24\u0e15 \u0e17\u0e31\u0e2c\u0e2b\u0e30 for their assistance.<\/p>\n
IOSurfaceAccelerator<\/p>\n
We would like to acknowledge Chanwit Muenprakoddee (ChemIndy), Franco Belman at Blackwing Intelligence, Iain Harkiss, an anonymous researcher, beist, hxr1 for their assistance.<\/p>\n
Kernel<\/p>\n
We would like to acknowledge Bhaswanth Chigurupati, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Cem Onat Karagun, DARKNAVY (@DarkNavyOrg), James Duffy (@0x4A616D657344), Kang Sangkwun, Lyutoon, N.M.Praveen Nawarathne (@zblockrat), Nebula Security (@nebusecurity), Nicolas Seriot, Peter Malone, Redon Gashi of Sentry, Robert Tran, Tristan Madani (@TristanInSec) from Talence Security, Xiang Li from AOSP Lab @Nankai University, an anonymous researcher for their assistance.<\/p>\n
LaunchServices<\/p>\n
We would like to acknowledge Rosyna Keller of Totally Not Malicious Software (paradisefacade.com) for their assistance.<\/p>\n
mDNSResponder<\/p>\n
We would like to acknowledge Anton Pakhunov, Franciszek Kalinowski (striga.ai \/ isec.pl), Hannes Weissteiner, Roland Czerny, Simone Franza, Stefan Gast and Daniel Gruss of Graz University of Technology, and Johanna Ullrich of the Interdisciplinary Transformation University (IT:U), Issa Sancho, Jian Zhou, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com\uff09 for their assistance.<\/p>\n
Messages<\/p>\n
We would like to acknowledge Pratyush Dutta for their assistance.<\/p>\n
Notes<\/p>\n
We would like to acknowledge Peter Henri for their assistance.<\/p>\n
Notifications<\/p>\n
We would like to acknowledge Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India, Himanshu Bharti @Xpl0itme From Khatima, Jan Rokita (rokita.me) for their assistance.<\/p>\n
PaperKit<\/p>\n
We would like to acknowledge Rahul Raj for their assistance.<\/p>\n
Passwords<\/p>\n
We would like to acknowledge Catalin Lita of Moralis, Christian Kohlsch\u00fctter, David Coomber of Info-Sec.CA, Lukasz Tulikowski at Software Cloud, Sujay Amin, an anonymous researcher for their assistance.<\/p>\n
ppp<\/p>\n
We would like to acknowledge Cem Onat Karagun for their assistance.<\/p>\n
Printing<\/p>\n
We would like to acknowledge Stuart Wallace for their assistance.<\/p>\n
Pro Res<\/p>\n
We would like to acknowledge Meta Red Team X \u2013 Nik Tsytsarkin for their assistance.<\/p>\n
Quick Look<\/p>\n
We would like to acknowledge Peter Malone for their assistance.<\/p>\n
RemoteServiceDiscovery<\/p>\n
We would like to acknowledge Tristan Madani (@TristanInSec) from Talence Security, an anonymous researcher for their assistance.<\/p>\n
Safari<\/p>\n
We would like to acknowledge Dem0ns @\u5929\u5e9c\u7b80\u6613\u4fe1\u5de5\u4f5c\u5ba4 for their assistance.<\/p>\n
Safari Downloads<\/p>\n
We would like to acknowledge Barath Stalin K (linkedin.com\/in\/barathstalin), Exell Nakano, Manojkumar Jaganathan (linkedin.com\/in\/manojkumar-j-7ba35b202\/) with HackerBro Technologies, Praditya Fajar Ramadhan, Zhiyang Zeng (@Wester), shobhit srivastav for their assistance.<\/p>\n
Safari Extensions<\/p>\n
We would like to acknowledge Jake Derouin (jakederouin.com) for their assistance.<\/p>\n
Sandbox Profiles<\/p>\n
We would like to acknowledge Lachlan Bauerochse for their assistance.<\/p>\n
Security<\/p>\n
We would like to acknowledge John Lussier, Masahiro Kawada (@kawakatz), Roman Zabicki for their assistance.<\/p>\n
Settings<\/p>\n
We would like to acknowledge an anonymous researcher for their assistance.<\/p>\n
Share Sheet<\/p>\n
We would like to acknowledge Atul Kishor Jaiswal, Benjamin Hornbeck for their assistance.<\/p>\n
Shortcuts<\/p>\n
We would like to acknowledge Csaba Fitzl (@theevilbit) of Iru, GP, Owen Pawling (@owenpawling) for their assistance.<\/p>\n
Status Bar<\/p>\n
We would like to acknowledge Andr.Ess, Rosyna Keller of Totally Not Malicious Software for their assistance.<\/p>\n
Terminal<\/p>\n
We would like to acknowledge Stuart Thomas for their assistance.<\/p>\n
UIKit<\/p>\n
We would like to acknowledge Jorge Welch for their assistance.<\/p>\n
Virtualization<\/p>\n
We would like to acknowledge Ye Zhang (@VAR10CK) of Baidu Security for their assistance.<\/p>\n
VoiceOver<\/p>\n
We would like to acknowledge Hariji Vivek Pandey for their assistance.<\/p>\n
WebKit<\/p>\n
We would like to acknowledge @TristanInSec, Behzad Najjarpour Jabbari (@_G4ru_), Big Bear, Eddy Tsalolikhin, Henock Habte, Kenneth Hsu, Maher Azzouzi, Meridian Miftari, OpenAI Codex Security \u2013 Amy Burnett, Souta Sugiyama, Vitaly Simonovich, an anonymous researcher, hamayanhamayan, lattice, ret2happy, wwwlk for their assistance.<\/p>\n
WebKit Canvas<\/p>\n
We would like to acknowledge Utkarsh Pal for their assistance.<\/p>\n
WebKit JavaScript Bindings<\/p>\n
We would like to acknowledge hamayanhamayan for their assistance.<\/p>\n
Wi-Fi<\/p>\n
We would like to acknowledge E Vestavik (@Dynasty) for their assistance.<\/p>\n
Widgets<\/p>\n
We would like to acknowledge Vishnu Prasad P G & Akshaya S, an anonymous researcher for their assistance.<\/p>\n
Additionally, Apple released the security content for iOS 26.7 and iPadOS 26.7<\/a>, including fixes for several vulnerabilities not listed in the security notes for iOS 27 and iPadOS 27. These include flaws in ImageIO, the kernel, IOGPUFamily, CoreMedia Video Toolbox, and WebKit that could lead to memory corruption, unexpected system or app termination, and other issues.<\/p>\n","protected":false},"excerpt":{"rendered":"Between the official release of its 2027 operating system updates, point updates to previous operating systems, and standalone…\n","protected":false},"author":2,"featured_media":848452,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41],"tags":[165,74],"class_list":["post-848451","post","type-post","status-publish","format-standard","has-post-thumbnail","category-mobile","tag-mobile","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/848451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=848451"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/848451\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/848452"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=848451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=848451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=848451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}