Apple has updated its security releases page with details of the vulnerabilities addressed in today’s updates to iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. In total, Apple addressed 329 unique security vulnerabilities across today’s software releases. Many of these vulnerabilities affect multiple operating systems, resulting in a whopping combined total of 1,265 CVE listings. These numbers may still increase, as Apple regularly adds new entries and updates existing ones in its security advisories after their initial publication.
Among the most notable security fixes are a Core Media issue that could let a malicious app access the camera on an iPhone, iPad, Mac, or Apple Vision Pro without permission (CVE-2026-86990), and an Apple Intelligence vulnerability that could let a remote attacker access sensitive user data on supported iPhones and iPads (CVE-2026-86987). Apple also addressed a Siri vulnerability in macOS Tahoe that could let an app access sensitive user data (CVE-2026-43736), along with multiple Web Kit flaws that could allow maliciously crafted web content to execute arbitrary code.
Apple credited AI tools and research teams for several vulnerabilities across its software. Earlier this year, the company released multiple updates to fix flaws exploited by Coruna and Dark Sword on older devices. Today’s updates also bring a previously released Core Graphics fix to devices still running iOS 18 and iPadOS 18.
Source: 9to5Mac · Summarized by HeadlinesBriefing