Apple Releases Security Update Patching Multiple Vulnerabilities in iOS 26 and iPadOS 26

Apple has released a comprehensive security update for iOS 26 and iPadOS 26, addressing 27 vulnerabilities across multiple system components. The update, released on 15 September 2025, targets devices including iPhone 11 and later models, along with iPad generations from iPad Pro 12.9-inch 3rd generation onwards.

The patches cover 23 system components, with WebKit receiving particular attention for multiple vulnerabilities that could cause Safari crashes and unexpected process termination, while the Apple Neural Engine also received fixes for an out-of-bounds access issue that could crash the system.

CVEs fixed in this update include CVE-2025-43344 (Apple Neural Engine), CVE-2025-43317 (AppleMobileFileIntegrity), CVE-2025-43346 (Audio), CVE-2025-31254 (Safari), CVE-2025-43329 (Sandbox), CVE-2025-43203 (Notes), and CVE-2025-43368 (WebKit Process Model). Security researchers from Trend Micro Zero Day Initiative, Kandji, and various independent professionals are credited for their disclosures, and users are urged to install the update promptly to protect against potential exploitation.