Apple Rolls Out iOS 26, macOS Tahoe 26 With Patches for Over 50 Vulnerabilities

Apple has announced the release of iOS 26 and macOS Tahoe 26, each bringing patches for more than 50 vulnerabilities. The iOS 26 and iPadOS 26 updates address 27 unique CVEs that could lead to memory corruption, information disclosure, crashes, or sandbox escapes, with WebKit receiving the largest set of fixes at five. macOS Tahoe 26 patches 38 unique CVEs, including 11 that were also addressed in iOS 26 and iPadOS 26.

The fixes span components such as WebKit, AppleMobileFileIntegrity, SharedFileList, Bluetooth and Sandbox, among others. In addition, Apple released iOS 18.7 and iPadOS 18.7 with fixes for 12 security defects, and rolled out iOS 16.7.12, iPadOS 16.7.12, iOS 15.8.5 and iPadOS 15.8.5 with patches for CVE-2025-43300, an ImageIO flaw exploited in attacks targeting WhatsApp users.

Safari 26 and Xcode 26 also arrived with their respective security fixes, while Apple notes that, aside from CVE-2025-43300, none of the resolved vulnerabilities are described as being exploited in the wild.